codeql/java/ql/test/library-tests/frameworks/spring/websocket/Test.java

import org.springframework.web.socket.handler.TextWebSocketHandler;
import org.springframework.web.socket.WebSocketSession;
import org.springframework.web.socket.WebSocketMessage;


public class Test extends TextWebSocketHandler {
    void sink(Object o) {}

    @Override
    public void handleMessage(WebSocketSession s, WebSocketMessage<?> m) {
        sink(s); // $hasTaintFlow
        sink(s.getAcceptedProtocol()); // $hasTaintFlow
        sink(s.getHandshakeHeaders()); // $hasTaintFlow
        sink(s.getPrincipal()); // $hasTaintFlow
        sink(s.getUri()); // $hasTaintFlow

        sink(m); // $hasTaintFlow
        sink(m.getPayload()); // $hasTaintFlow

    }
}