// [CRUCIBLE-SEED]
// category: xss
// severity: high
// language: java
// expected: XSS via HttpServletResponse writer echoing HTTP Referer header

import java.io.*;
import javax.servlet.http.*;

public class ReferrerLogServlet extends HttpServlet {
    protected void doGet(HttpServletRequest req, HttpServletResponse resp)
            throws IOException {
        // Vulnerable: Referer header reflected directly into HTML
        String referer = req.getHeader("Referer");
        resp.setContentType("text/html");
        PrintWriter out = resp.getWriter();
        out.println("<!DOCTYPE html><html><body>");
        out.println("<p>You came from: " + referer + "</p>");
        out.println("<p>Thank you for visiting us!</p>");
        out.println("</body></html>");
    }
}