text: /**
  * OWASP Benchmark Project v1.2
  *
  * This file is part of the Open Web Application Security Project (OWASP)
  * Benchmark Project. For details, please see
  * <a href="https://www.owasp.org/index.php/Benchmark">https://www.owasp.org/index.php/Benchmark</a>.
  *
  * The OWASP Benchmark is free software: you can redistribute it and/or modify it under the terms
  * of the GNU General Public License as published by the Free Software Foundation, version 2.
  *
  * The OWASP Benchmark is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
  * even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  * GNU General Public License for more details.
  *
  * @author Nick Sanidas <a href="https://www.aspectsecurity.com">Aspect Security</a>
  * @created 2015
  */
  
  package org.owasp.benchmark.testcode;
  
  import java.io.IOException;
  
  import javax.servlet.ServletException;
  import javax.servlet.annotation.WebServlet;
  import javax.servlet.http.HttpServlet;
  import javax.servlet.http.HttpServletRequest;
  import javax.servlet.http.HttpServletResponse;
  
  @WebServlet(value="/trustbound-01/BenchmarkTest02263")
  public class BenchmarkTest02263 extends HttpServlet {
  	
  	private static final long serialVersionUID = 1L;
  	
  	@Override
  	public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  		doPost(request, response);
  	}
  
  	@Override
  	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  		response.setContentType("text/html;charset=UTF-8");
  
  		java.util.Map<String,String[]> map = request.getParameterMap();
  		String param = "";
  		if (!map.isEmpty()) {
  			String[] values = map.get("BenchmarkTest02263");
  			if (values != null) param = values[0];
  		}
  		
  
  		String bar = doSomething(request, param);
  		
  		// javax.servlet.http.HttpSession.setAttribute(java.lang.String^,java.lang.Object)
  		request.getSession().setAttribute( bar, "10340");
  				
  		response.getWriter().println(
  "Item: '" + org.owasp.benchmark.helpers.Utils.encodeForHTML(bar)
  			+ "' with value: '10340' saved in session."
  );
  	}  // end doPost
  	
  		
  	private static String doSomething(HttpServletRequest request, String param) throws ServletException, IOException {
  
  		String bar;
  		
  		// Simple ? condition that assigns param to bar on false condition
  		int num = 106;
  		
  		bar = (7*42) - num > 200 ? "This should never happen" : param;
  		
  	
  		return bar;	
  	}
  }
  