Language: Java
Label: vulnerable
CWE: NVD-CWE-noinfo \u2014 

Code:
    public static RequestTarget createWithoutValidation(
            RequestTargetForm form, @Nullable String scheme, @Nullable String authority,
            String path, @Nullable String query, @Nullable String fragment) {
        return new DefaultRequestTarget(form, scheme, authority, path, query, fragment);
    }