ds-servlet-objects: covering servlet object injection use cases