CVE

This query has not been tested against all lgtm projects. So, there is no CVE found using this PR.

Description

This is a continuation of the now closed issue #94.

This query detects instances where user input is embedded in a template in an unsafe manner.
The PR adds support for multiple Java templating engines. As of now it covers :

• Velocity Templating Engine
• Freemarker Templating Engine
• Pebble Templating Engine
• Jinjava Templating Engine
• MVEL Templating Engine
• Thymeleaf Templating Engine

Link to the PR: github/codeql#5935