The following code displays a Reflected XSS (Type 1) scenario.
The following JSP code segment reads an employee ID, eid, from an HTTP request and displays it to the user.
(bad code)
<% String eid = request.getParameter("eid"); %>