in workshop/workshop-java-repo-vulnerable/src/main/java/com/handlingformsubmission/GreetingController.java [55:58]
public void header(HttpServletRequest req, HttpServletResponse resp) throws IOException {
String value = req.getParameter("value");
resp.addHeader("X-Header", value); // Noncompliant
}