A JSP webapp vulnerable to various side channel attacks