New class vulnerable

build.gradle

@@ -1,5 +1,6 @@
 plugins {
     id 'java'
+    id "org.sonarqube" version "3.4.0.2513"
 }
 
 group 'org.example'
@@ -16,4 +17,4 @@ dependencies {
 
 test {
     useJUnitPlatform()
-}
+}

src/main/java/example/Start.java

@@ -1,6 +1,5 @@
 package example;
 
-import java.sql.Connection;
 import java.sql.DriverManager;
 import java.sql.SQLException;
 
@@ -15,7 +14,29 @@ public static void main(String[] args) {
   }
 
   private static void doVulnerableCode() throws SQLException {
-    Connection conn = DriverManager.getConnection("jdbc:derby:memory:myDB;create=true", "login", "");
+    new Vulnerable().vulnerable();
+  }
+
+  private static void doVulnerableCode(String output) {
+    try {
+      DriverManager.getConnection("jdbc:derby:memory:myDB;create=true", "login", "");
+    } catch (SQLException e) {
+      throw new RuntimeException(output + " " + e);
+    }
+  }
+
+  private static void anotherVulnerableCode() {
+    var regex = "/^([a-zA-Z0-9])(([\\-.]|[_]+)?([a-zA-Z0-9]+))*(@){1}[a-z0-9]+[.]{1}(([a-z]{2,3})|([a-z]{2,3}[.]{1}[a-z]{2,3}))$/";
+    if (!"some phrase".matches(regex)){
+      throw new Error("Invalid mail format");
+    }
+  }
+
+  private static void moreVulnerableCode() {
+    var regex = "/^([a-zA-Z0-9])(([\\-.]|[_]+)?([a-zA-Z0-9]+))*(@){1}[a-z0-9]+[.]{1}(([a-z]{2,3})|([a-z]{2,3}[.]{1}[a-z]{2,3}))$/";
+    if (!"some phrase test".matches(regex)){
+      throw new Error("Invalid e-mail format");
+    }
   }
 
 }

src/main/java/example/Vulnerable.java

@@ -0,0 +1,15 @@
+package example;
+
+import java.sql.Connection;
+import java.sql.DriverManager;
+import java.sql.SQLException;
+
+public class Vulnerable {
+  public Connection vulnerable() {
+    try {
+      return DriverManager.getConnection("jdbc:derby:memory:myDB;create=true", "login", "");
+    } catch (SQLException e) {
+      throw new RuntimeException(e);
+    }
+  }
+}