Language: Java
Label: vulnerable
CWE: NVD-CWE-noinfo \u2014 

Code:
    void serverShouldHandleReservedCharacters() {
        assertAccepted(forServer("/#/:@!$&'()*+,;=?a=/#/:[]@!$&'()*+,;="),
                       "/%23/:@!$&'()*+,;=",
                       "a=/%23/:[]@!$&'()*+,;=");
        assertAccepted(forServer("/%23%2F%3A%40%21%24%26%27%28%29%2A%2B%2C%3B%3D%3F" +
                                 "?a=%23%2F%3A%5B%5D%40%21%24%26%27%28%29%2A%2B%2C%3B%3D%3F"),
                       "/%23%2F:@!$&'()*+,;=%3F",
                       "a=%23%2F%3A%5B%5D%40%21%24%26%27%28%29%2A%2B%2C%3B%3D%3F");
    }