SecurityInnovation/TMContentReview — Issue #245: Use Mapping Values When Redirecting on User Input
Author: SergeTruth
Created: 2011-11-07 23:37:15+00:00
State: open

You might want to use a indirect reference other than "balance" as the developer may think the logic looks like the following:

String redirectPath = request.getParameter("map") + ".asp"