up

bench/reachability-benchmark/cases/java/spring-reflection/src/ReflectController.java

@@ -0,0 +1,29 @@
+package bench.reachability.springreflection;
+
+import java.util.Map;
+
+public class ReflectController {
+    // Reflection sink: user controls Class.forName target
+    public static Response run(Map<String, String> body) {
+        String className = body.get("class");
+        if (className == null || className.isBlank()) {
+            return new Response(400, "bad request");
+        }
+        try {
+            Class<?> type = Class.forName(className);
+            Object instance = type.getDeclaredConstructor().newInstance();
+            return new Response(200, instance.toString());
+        } catch (Exception ex) {
+            return new Response(500, ex.getClass().getSimpleName());
+        }
+    }
+
+    public record Response(int status, String body) {}
+
+    public static class Marker {
+        @Override
+        public String toString() {
+            return "marker";
+        }
+    }
+}

bench/reachability-benchmark/cases/java/spring-reflection/src/ReflectControllerTest.java

@@ -0,0 +1,20 @@
+package bench.reachability.springreflection;
+
+import java.io.File;
+import java.io.FileWriter;
+import java.util.Map;
+
+public class ReflectControllerTest {
+    public static void main(String[] args) throws Exception {
+        Map<String, String> body = Map.of("class", ReflectController.Marker.class.getName());
+        var res = ReflectController.run(body);
+        assert res.status() == 200 : "status";
+        assert res.body().equals("marker") : "body";
+
+        File outDir = new File("outputs");
+        outDir.mkdirs();
+        try (FileWriter fw = new FileWriter(new File(outDir, "SINK_REACHED"))) {
+            fw.write("true");
+        }
+    }
+}