Java: Add test for XSS sanitizer

Author: Sauyon Lee

java/ql/test/query-tests/security/CWE-079/semmle/tests/SpringXSS.java

@@ -5,6 +5,7 @@
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.util.HtmlUtils;
 
 import java.util.Optional;
 
@@ -157,4 +158,9 @@ public static String stringWithNoMediaType(String userControlled) {
     return userControlled; // $xss
   }
 
-}
+  @GetMapping(value = "/abc")
+  public static String sanitizedString(String userControlled) {
+    return HtmlUtils.htmlEscape(userControlled);
+  }
+
+}