title: Is URLEncoder.encode(string, "UTF-8") a poor validation?
body: <p>In a portion of my J2EE/java code, I do a URLEncoding on the output of <code>getRequestURI()</code> to sanitize it to prevent XSS attacks, but Fortify SCA considers that poor validation.</p>
  
  <p>Why?</p>