codeql/java/ql/test/library-tests/dataflow/taintsources/MicronautConfig.java

import io.micronaut.context.annotation.Value;
import io.micronaut.context.annotation.Property;
import io.micronaut.http.annotation.*;

@Controller("/config")
class MicronautConfig {

    private static void sink(Object o) {}

    @Value("${app.secret}")
    String secretValue;

    @Property(name = "app.api-key")
    String apiKey;

    @Get("/secret")
    void testValueField() {
        sink(secretValue); // $hasLocalValueFlow
    }

    @Get("/key")
    void testPropertyField() {
        sink(apiKey); // $hasLocalValueFlow
    }

    @Get("/param")
    void testValueParam(@Value("${app.name}") String appName) {
        sink(appName); // $hasLocalValueFlow
    }
}