Ozark-mvc-j2ee Ozark is a reference implementation for MVC 1.0. The details about this project are posted in blog. A vulnerable and secure application developed that demonstrates two attacks and its defences: Reflect XSS Command Injection