public HttpContext createHttpContext ( ApplicationRequest req , ApplicationResponse resp ) throws Exception { Template template = ( Template ) req . getTemplate ( ) ; return createHttpContext ( req , resp , template . getTemplateSource ( ) . getContextSource ( ) ) ; }
Lets external classes use the HttpContext for their own possibly malicious purposes .