Command injection attack: tempered input value with &&

Question

Controller:

 @PostMapping("/output/")
@ResponseBody
public Object command_injected(@RequestParam String command) {
    Map respons