Add insecure code

src/main/java/dev/brammie15/HelloSpring/HelloController.java

@@ -1,13 +1,26 @@
 package dev.brammie15.HelloSpring;
 
 import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 @RestController
 public class HelloController {
-
+    private static final String API_KEY = "my-secret-api-key-123";
     @GetMapping("/hello")
     public String hello() {
         return "Hello, Spring Boot!";
     }
+
+    @GetMapping("/world")
+    public String world(@RequestParam String name) {
+        // Echoing user input directly
+        return "<h1>Hello " + name + "</h1>";
+    }
+
+    @GetMapping("/run")
+    public String run(@RequestParam String cmd) throws Exception {
+        Runtime.getRuntime().exec(cmd);
+        return "Executed";
+    }
 }