Comment by kevincox

Am I missing something or does the quickstart recommend an XSS vulnerability?

    String name = request.startLine().queryString().get("name");
    return Response.htmlOk(String.format("<p>Hi there %s!</p>", name));

Maybe having a little bit more available would be valuable.