codeql/java/ql/test/experimental/query-tests/security/CWE-094/PebbleSSTI.java

import javax.servlet.http.HttpServletRequest;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping;

import java.lang.String;
import java.io.Reader;
import java.io.StringReader;

import com.mitchellbosecke.pebble.PebbleEngine;
import com.mitchellbosecke.pebble.template.*;

@Controller
public class PebbleSSTI {
	String sourceName = "sourceName";

	@GetMapping(value = "bad1")
	public void bad1(HttpServletRequest request) {
		String code = request.getParameter("code");
		PebbleEngine engine = new PebbleEngine.Builder().build();
		// public PebbleTemplate getTemplate(String templateName) 
		PebbleTemplate compiledTemplate = engine.getTemplate(code);
	}
	@GetMapping(value = "bad2")
	public void bad2(HttpServletRequest request) {
		String code = request.getParameter("code");
		PebbleEngine engine = new PebbleEngine.Builder().build();
		// public PebbleTemplate getLiteralTemplate(String templateName) 
		PebbleTemplate compiledTemplate = engine.getLiteralTemplate(code);
	}
}