Language: Java
Label: vulnerable
CWE: NVD-CWE-noinfo \u2014 

Code:
    private DefaultRequestTarget(RequestTargetForm form, @Nullable String scheme, @Nullable String authority,
                                 String path, @Nullable String query, @Nullable String fragment) {

        assert (scheme != null && authority != null) ||
               (scheme == null && authority == null) : "scheme: " + scheme + ", authority: " + authority;

        this.form = form;
        this.scheme = scheme;
        this.authority = authority;
        this.path = path;
        this.query = query;
        this.fragment = fragment;
    }