Language: Java
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
    private Map<String, Object> createJobDetailModel() {
        GitMaterialConfig gitMaterialConfig = gitMaterialConfig();

        MaterialRevisions materialRevisions = new MaterialRevisions();
        materialRevisions.addRevision(new GitMaterial(gitMaterialConfig),
            new Modification("Ernest Hemingway <oldman@sea.com>", "comment", "email", new Date(), "12", ""));

        Pipeline pipeline = schedule(pipelineConfig("pipeline", new MaterialConfigs(gitMaterialConfig)), createWithModifications(materialRevisions, ""));
        JobInstance jobInstance = building("job");
        jobInstance.getIdentifier().setPipelineLabel(DODGY_LABEL);

        JobInstances recent25 = new JobInstances();
        recent25.add(jobInstance);
        JobDetailPresentationModel model = new JobDetailPresentationModel(jobInstance, recent25, null,
            pipeline, new Tabs(), new TrackingTool(),
            mock(ArtifactsService.class), StageMother.custom("stage"));

        return minimalModelFrom(model);
    }