Am I missing something or does the quickstart recommend an XSS vulnerability?
String name = request.startLine().queryString().get("name");
return Response.htmlOk(String.format("<p>Hi there %s!</p>", name));