Veracode triggering on ResourceResolver.findResource()

[#1]

It looks like Veracode does not like executing queries using the ResourceResolver.findResource() method. ResourceResolver doesn't have a parameterized version. Has anyone been able to resolve this issue? The customer I am working fore requires that all Very High to Low risk assessments are removed.

[#2 · Accepted solution]

what exactly is Veracode complaining about?

The method signature is

java.util.Iterator<Resource>

findResources(java.lang.String query, java.lang.String language)

So I womder what Veracode is complaining about, all parameters are strongly typed.