system: You are an expert security code reviewer. You will be shown a source code file along with a multi-select question listing several CWE (Common Weakness Enumeration) categories. Your task is to identify which of the listed CWEs are present in the code.

OUTPUT FORMAT: Respond with the letter(s) of all correct options, sorted alphabetically and comma-separated, wrapped in a single \boxed{...}. Examples: `\boxed{A}` for one correct, `\boxed{A,C}` for two, `\boxed{A,C,E}` for three. Output the boxed answer ONLY -- no explanation, no other text.

user: ```python
from flask import Flask, request, render_template
import urllib.request
import requests as rq
from google.cloud import language
from google.cloud.language import enums
from google.cloud.language import types


app = Flask(__name__)


smiley = "smile"
frowny = "frown"
meh = "meh"


def failed():
    return """
            Sorry, this URL cannot be processed
            <br />
            <a class="back" href="/">Go Back</a>
        """


@app.route('/handledata', methods=['POST'])
def handle_data():
    url = request.form['url']

    if len(url) < 5:
        return failed()

    # Check if http in from of url or not
    if url[:4] != "http":
        url = "https://" + url

    with urllib.request.urlopen(url) as fp:
        html = fp.read()
    try:
        sent_str = get_sentiment(html.decode())
    except:
        return failed()
    try:
        classification = get_classification(html.decode())
    except:
        return failed()

    str_to_template = [round(sent_str.magnitude * sent_str.score, 2), round(sent_str.score, 2), '']

    bgcolor = "#f9f1f1"
    if str_to_template[1] < -.14:
        str_to_template[2] = frowny
        bgcolor = "lightred"
    elif str_to_template[1] > .14:
        str_to_template[2] = smiley
        bgcolor = "lightgreen"
    else:
        str_to_template[2] = meh
        bgcolor = "lightgrey"

    return render_template('show_results.html', sentiment=str_to_template, class_list=classification, bgcolor=bgcolor)


@app.route('/')
def index():
    return render_template('index.html')


def get_sentiment(html):
    # Instantiates a client
    client = language.LanguageServiceClient()
    
    # The text to analyze
    #text = u'Hello, world!'
    document = types.Document(
        content=html,
        type=enums.Document.Type.HTML)
    
    # Detects the sentiment of the text
    return client.analyze_sentiment(document=document).document_sentiment
    
def get_classification(html):
    client = language.LanguageServiceClient()

    document = types.Document(
        content=html,
        type=enums.Document.Type.HTML)

    return client.classify_text(document=document).categories
    

```

Which of the following CWE vulnerability categories are present in this code? Multiple options may be correct.

  A) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
  B) CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
  C) CWE-117: Improper Output Neutralization for Logs
  D) CWE-918: Server-Side Request Forgery (SSRF)
  E) CWE-943: Improper Neutralization of Special Elements in Data Query Logic
  F) CWE-377: Insecure Temporary File
Answer: D