title: Checkmarx highlight code as sqlinjection vulnerability
body: <p>Checkmarx indicates the following code snippet as a sql injection vulnerability.</p>
  
  <p>In the checkmarx report descibe the below code snippet as shown below</p>
  
  <blockquote>
    <p>"gets user input from the readLine element. This  element’s value then
    flows through the code without being properly sanitized or validated
    This may enable an SQL Injection attack"</p>
  </blockquote>
  
  <p>For brevity I havent included full text.</p>
  
  <pre><code>InputStreamReader isr = null;
      BufferedReader br = null;
                      try{                    
                          ClassPathResource defaultReports = new ClassPathResource(dbVendor + "/sql_inserts.sql");
  
                          isr = new InputStreamReader(defaultReports.getInputStream());
                          br = new BufferedReader(isr);
  
                          c = session.connection();
                          String sqlLine = null;
                          while((sqlLine = br.readLine()) != null) {
                              sqlLine = sqlLine.trim();
                                  Statement st = null;
                                  try{
                                      st = c.createStatement();
                                      st.execute(sqlLine);
                                  }catch(SQLException e){
  
                                  }catch(Exception e){
  
                                  }finally{
                                      if (st != null)
                                          st.close();
                                  }
                              }
                          }
  </code></pre>
  
  <p>//sql_inserts.sql file contain set of insert statements</p>
  
  <p>I want to convert above code to checkmarx friendly way.After that checkmark should not be highlighted the code snippet as high sql injection vulnerability.</p>