@Test
public void testLdapInjection() {

    // Inject so
    //   "(&(objectClass=person)(sAMAccountName=${username}))"
    // becomes
    //   "(&(objectClass=person)(sAMAccountName=*)(userPassword=userOnePassword))"
    // Thus searching by password
    Account userOneModel = ldap.authenticate("*)(userPassword=userOnePassword", "userOnePassword");
    assertNull(userOneModel);
}