It's a common pattern in Java injection vulnerabilities. You can see an example here: https://portswigger.net/research/server-side-template-injection https://p

It's a common pattern in Java injection vulnerabilities. You can see an example here: https://portswigger.net/research/server-side-template-injection https://portswigger.net/research/server-side-template-inject...