javasecurity:S5131: Change this code to not reflect user-controlled data

We have a jsp application which reporting the vulnerability

We tried both none of them solves vulnerability.

Hey there @Indra_Mohan_Thota

You’ll need to share a lot more details.

  • What version of SonarQube are you running?
  • A snippet of the code marked as vulnerable
  • Examples of the remediations you tried that still produced the issue.