%@ page language="java" contentType="text/html; charset=ISO-8859-1"
pageEncoding="ISO-8859-1"%>
HTTP Splitting
<% response.sendRedirect("https://aa.com/test.php"); %> <%-- // good HTML Comment in JSP file --%>
<%-- // bad HTML Comment in JSP file --%>