This is considered as a bad practice as it creates a new anonymous class `WebAppForbiddenException$1` when it isn't really needed.
More over a new instance is created every time but the content of that instance is always the same.

A constant `Map<String, String> ENTITY = new HashMap<String, String>()` would be probably more appropriate, with a static initialiser to set up the content.