Language: Java
Label: vulnerable
CWE: NVD-CWE-noinfo \u2014 

Code:
    void shouldNormalizeSemicolon(Mode mode) {
        assertAccepted(parse(mode, "/;?a=b;c=d"), "/;", "a=b;c=d");
        // '%3B' in a query string should never be decoded into ';'.
        assertAccepted(parse(mode, "/%3b?a=b%3Bc=d"), "/;", "a=b%3Bc=d");
    }