Program: 62233
Project: 62233
Buggy source:
@Override public void addResourceHandlers(ResourceHandlerRegistry registry){
  String prefix="String_Node_Str";
  String absToscaRepo=prefix.concat(safeGetRealPath(toscaRepo)).concat("String_Node_Str");
  String absPluginUi=prefix.concat(safeGetRealPath(pluginsUi)).concat("String_Node_Str");
  log.info("String_Node_Str",absToscaRepo);
  log.info("String_Node_Str",absPluginUi);
  registry.addResourceHandler("String_Node_Str").addResourceLocations(absToscaRepo).resourceChain(false).addResolver(new ResourceResolver(){
    @Override public Resource resolveResource(    HttpServletRequest request,    String requestPath,    List<? extends Resource> locations,    ResourceResolverChain chain){
      log.debug("String_Node_Str");
      ServletWebRequest webRequest=new ServletWebRequest(request);
      Map uriTemplateVars=(Map)webRequest.getAttribute(HandlerMapping.URI_TEMPLATE_VARIABLES_ATTRIBUTE,0);
      String csarName=(String)uriTemplateVars.get("String_Node_Str");
      String csarVersion=(String)uriTemplateVars.get("String_Node_Str");
      if (csarAuthorizationFilter == null) {
        throw new NotFoundException("String_Node_Str");
      }
 else {
        csarAuthorizationFilter.checkReadAccess(new Csar(csarName,csarVersion));
      }
      return chain.resolveResource(request,csarName + "String_Node_Str" + csarVersion+ "String_Node_Str"+ requestPath,locations);
    }
    @Override public String resolveUrlPath(    String resourceUrlPath,    List<? extends Resource> locations,    ResourceResolverChain chain){
      return chain.resolveUrlPath(resourceUrlPath,locations);
    }
  }
);
  registry.addResourceHandler(PLUGIN_STATIC_ENDPOINT + "String_Node_Str").addResourceLocations(absPluginUi);
}

Fixed version (ground truth):
@Override public void addResourceHandlers(ResourceHandlerRegistry registry){
  String prefix="String_Node_Str";
  String absToscaRepo=prefix.concat(safeGetRealPath(toscaRepo)).concat("String_Node_Str");
  String absPluginUi=prefix.concat(safeGetRealPath(pluginsUi)).concat("String_Node_Str");
  log.info("String_Node_Str",absToscaRepo);
  log.info("String_Node_Str",absPluginUi);
  registry.addResourceHandler("String_Node_Str").addResourceLocations(absToscaRepo).resourceChain(false).addResolver(new ResourceResolver(){
    @Override public Resource resolveResource(    HttpServletRequest request,    String requestPath,    List<? extends Resource> locations,    ResourceResolverChain chain){
      log.debug("String_Node_Str");
      ServletWebRequest webRequest=new ServletWebRequest(request);
      Map uriTemplateVars=(Map)webRequest.getAttribute(HandlerMapping.URI_TEMPLATE_VARIABLES_ATTRIBUTE,0);
      String csarName=(String)uriTemplateVars.get("String_Node_Str");
      String csarVersion=(String)uriTemplateVars.get("String_Node_Str");
      if (csarAuthorizationFilter == null || csarService == null) {
        throw new NotFoundException("String_Node_Str");
      }
 else {
        csarAuthorizationFilter.checkReadAccess(csarService.getOrFail(csarName,csarVersion));
      }
      return chain.resolveResource(request,csarName + "String_Node_Str" + csarVersion+ "String_Node_Str"+ requestPath,locations);
    }
    @Override public String resolveUrlPath(    String resourceUrlPath,    List<? extends Resource> locations,    ResourceResolverChain chain){
      return chain.resolveUrlPath(resourceUrlPath,locations);
    }
  }
);
  registry.addResourceHandler(PLUGIN_STATIC_ENDPOINT + "String_Node_Str").addResourceLocations(absPluginUi);
}