#fixed code
                                @Test
    public void readClasspathResource() {

        boolean ok = true;

        ok |= Str.in ("apple", IO.read ( "classpath://testfile.txt" ))
                || die( "two slashes should work" );


        //Proper URL
        ok |= Str.in ("apple", IO.read ( "classpath:///testfile.txt" ))
                || die( "two slashes should work" );


        //Proper URL
        ok |= Str.in ("apple", IO.read ( "classpath:testfile.txt" ))
                || die( "two slashes should work" );

        //Proper URL
        ok |= Str.in ("apple", IO.readFromClasspath ( this.getClass (), "testfile.txt" ))
                || die( "two slashes should work" );

        //Proper URL
        ok |= Str.in ("apple", IO.readFromClasspath ( this.getClass (), "/testfile.txt" ))
                || die( "two slashes should work" );


        puts(IO.list ( "classpath:/org/node" )) ;

        //Proper URL
        ok |=

                Lists.idx (IO.list ( "classpath:/org/node" ), 0).endsWith ( "org/node/file1.txt" )

                || die( );


    }
#vulnerable code 
                                @Test
    public void readClasspathResource() {

        boolean ok = true;

        ok |= Str.in ("apple", IO.read ( "classpath://testfile.txt" ))
                || die( "two slashes should work" );


        //Proper URL
        ok |= Str.in ("apple", IO.read ( "classpath:///testfile.txt" ))
                || die( "two slashes should work" );


        //Proper URL
        ok |= Str.in ("apple", IO.read ( "classpath:testfile.txt" ))
                || die( "two slashes should work" );

        //Proper URL
        ok |= Str.in ("apple", IO.readFromClasspath ( this.getClass (), "testfile.txt" ))
                || die( "two slashes should work" );

        //Proper URL
        ok |= Str.in ("apple", IO.readFromClasspath ( this.getClass (), "/testfile.txt" ))
                || die( "two slashes should work" );

    } 
                            #location 6 
                            #vulnerability type NULL_DEREFERENCE