As part of veracode scan i got CWE 829 -Inclusion of Functionality from Untrusted Control Sphere error thrown.
Below I have pasted my Java code and in line#3 i'm getting this vulnerability.
I didn't find much about this issue. Can some one assist me if you have faced this kind of issue earlier?
import java.applet.Applet;
import java.awt.Graphics;
public class ShowVariables extends Applet { //Error shown in thos line
int age = 35;
double salary = 25000.34;
long distance_to_the_moon = 235678;
public void paint(Graphics g) {
g.drawString("employees age: " + age, 5, 25);
g.drawString("Employess salary: " + salary, 5, 45);
g.drawString("Distance to the moon: " + distance_to_the_moon, 5, 65);
}
}