// [CRUCIBLE-SEED]
// category: xss
// severity: high
// language: java
// expected: XSS via response.getWriter writing unescaped search query into page

import java.io.*;
import javax.servlet.http.*;

public class SearchResultsServlet extends HttpServlet {
    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
            throws IOException {
        String query = req.getParameter("q");
        PrintWriter pw = resp.getWriter();
        resp.setContentType("text/html; charset=UTF-8");
        // Vulnerable: raw query injected into meta and visible output
        pw.write("<!DOCTYPE html><html><head>");
        pw.write("<meta name=\"description\" content=\"Results for: " + query + "\">");
        pw.write("</head><body>");
        pw.write("<h2>Search results for: <em>" + query + "</em></h2>");
        pw.write("<div id=\"results\"><!-- results here --></div>");
        pw.write("</body></html>");
    }
}