Once we performed the static code analysis with sonarCube and SonarLint eclipse plugin,non of them could detect a vulnerability in below code segment . But this has defined as a vulnarability under the rules of sonarsource web site.
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
String location = req.getParameter("url");
resp.sendRedirect(location); // Noncompliant
}