diff --git a/src/fonts.js b/src/fonts.js index c1023f6fc..6b8906827 100644 --- a/src/fonts.js +++ b/src/fonts.js @@ -494,9 +494,14 @@ var FontLoader = { // 82402. // Validate the names parameter -- the values can used to construct HTML. - if (!/^\w+$/.test(names.join(''))) + if (!/^\w+$/.test(names.join(''))) { error('Invalid font name(s): ' + names.join()); + // Normally the error-function throws. But if a malicious code + // intercepts the function call then the return is needed. + return; + } + var div = document.createElement('div'); div.setAttribute('style', 'visibility: hidden;' +