HackerOne Bug Bounty Disclosure: [java]:-cwe-552-add-sources-and-sinks-to-detect-unsafe-getresource-calls-in-java-ee-applicationsbyluchua