code: public HttpContext createHttpContext(ApplicationRequest req,
                                           ApplicationResponse resp)
          throws Exception {
  
          Template template = (Template) req.getTemplate();
  
          return createHttpContext(req, resp,
                                   template.getTemplateSource().getContextSource());
      }
docs: Lets external classes use the HttpContext for their own, possibly
  malicious purposes.