Language: PHP
Label: vulnerable
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
    public function plugin_git_settings_additional_webhooks(array $params) //phpcs:ignore PSR1.Methods.CamelCapsMethodName.NotCamelCaps
    {
        if ($this->isAllowed($params['repository']->getProjectId())) {
            $xzibit = new GitWebhooksSettingsEnhancer(
                new Hook\HookDao(),
                new LogFactory(
                    new JobDao(),
                    new ProjectJobDao(),
                    new GitRepositoryFactory(
                        new GitDao(),
                        ProjectManager::instance()
                    )
                ),
                $this->getCSRF(),
                self::getJenkinsServerFactory()
            );
            $xzibit->pimp($params);
        }
    }