Move files from experimental

java/ql/test/query-tests/security/CWE-094/PebbleSSTI.java

@@ -0,0 +1,30 @@
+import javax.servlet.http.HttpServletRequest;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+
+import java.lang.String;
+import java.io.Reader;
+import java.io.StringReader;
+
+import com.mitchellbosecke.pebble.PebbleEngine;
+import com.mitchellbosecke.pebble.template.*;
+
+@Controller
+public class PebbleSSTI {
+	String sourceName = "sourceName";
+
+	@GetMapping(value = "bad1")
+	public void bad1(HttpServletRequest request) {
+		String code = request.getParameter("code");
+		PebbleEngine engine = new PebbleEngine.Builder().build();
+		// public PebbleTemplate getTemplate(String templateName) 
+		PebbleTemplate compiledTemplate = engine.getTemplate(code);
+	}
+	@GetMapping(value = "bad2")
+	public void bad2(HttpServletRequest request) {
+		String code = request.getParameter("code");
+		PebbleEngine engine = new PebbleEngine.Builder().build();
+		// public PebbleTemplate getLiteralTemplate(String templateName) 
+		PebbleTemplate compiledTemplate = engine.getLiteralTemplate(code);
+	}
+}