Thread.sleep method is used to pause the execution of current thread for specified time. When it is used to keep several relevant tasks in synchronization and the sleep time is user-controlled data, especially in the web application context, it can be abused to cause all of a server's threads to sleep, leading to denial of service.

The query detects uncontrolled thread resource consumption in Java EE web applications, which checks:

• sources of servlets and JSF
• remote user input and local container configuration
• both the javax and jakarta packages

Please consider to merge the PR. Thanks.

Thanks @Marcono1234 and @intrigus-lgtm for reviewing this PR. I've made requested changes.

I've also added a new test case to detect remote source from an HTTP request header such as Retry-After: