Testing for OGNL out-of-band injection