codeql/java/ql/test/library-tests/dataflow/taintsources/A.java

import java.io.FileInputStream;
import java.io.IOException;
import java.net.InetAddress;
import java.net.MalformedURLException;
import java.net.Socket;
import java.net.URL;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.Properties;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class A {
  public static void main(String[] args) {
    String[] a = args; // user input
    String s = args[0]; // user input
  }

  public static void userInput() throws SQLException, IOException, MalformedURLException {
    System.getenv("test"); // user input
    class TestServlet extends HttpServlet {
      @Override
      protected void doGet(HttpServletRequest req, HttpServletResponse resp)
      throws ServletException, IOException {
        req.getParameter("test"); // remote user input
        req.getHeader("test"); // remote user input
        req.getQueryString(); // remote user input
        req.getCookies()[0].getValue(); // remote user input
      }
    }
    new Properties().getProperty("test"); // user input
    System.getProperty("test"); // user input
    new Object() {
      public void test(ResultSet rs) throws SQLException {
        rs.getString(0); // user input
      }
    };
    new URL("test").openConnection().getInputStream(); // remote user input
    new Socket("test", 1234).getInputStream(); // remote user input
    InetAddress.getByName("test").getHostName(); // remote user input

    System.in.read(); // user input
    new FileInputStream("test").read(); // user input
  }

}