Test case 139791

Description

CWE: 470 Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection)
BadSource: getQueryString_Servlet Parse id param out of the URL query string (without using getParameter())
GoodSource: Set data to a hardcoded class name
Sinks:
BadSink : Instantiate class named in data
Flow Variant: 71 Data flow: data passed as an Object reference argument from one method to another in different classes in the same package