Predicate getMessageFlowsExternally
Holds if there is a call to getMessage() that then flows to a servlet response.
Import path
import semmle.code.java.security.StackTraceExposureQuerypredicate getMessageFlowsExternally(Node externalExpr, GetMessageFlowSource getMessage)