Language: Java
Label: vulnerable
CWE: NVD-CWE-noinfo \u2014 

Code:
    public static RequestTarget forServer(String reqTarget, boolean allowDoubleDotsInQueryString) {
        final RequestTarget cached = RequestTargetCache.getForServer(reqTarget);
        if (cached != null) {
            return cached;
        }

        return slowForServer(reqTarget, allowDoubleDotsInQueryString);
    }