title: Fortify reporting "Privacy violation" issue
body: <p>The below code is being identified by Fortify as a vulnerability/issue of the "Privacy violation" category.</p>
  
  <pre><code>sbfOut.append(" validateSSN(document.form1." + name
                      + ",\" \",\" \")' " + override + "; &gt;");
              out.println(sbfOut.toString());
          } // SN end
          else if (fieldType.equals(CoConstants.DE_ELEMENT_TYPE_TN
  </code></pre>
  
  <p>In another method I have, Fortify identified the below code block as a vulnerability issue of the "Privacy violation" category as well.</p>
  
  <pre><code>sbfOut.append(" &lt;OPTION VALUE='0'&gt;-NO DATA-&lt;/OPTION&gt;");
          try {
              out.println(sbfOut.toString());
          } catch (IOException ioe) {
              debug("Exception In coCustomTag" + ioe
  </code></pre>
  
  <p>I am not able to figure out how to fix this and where exactly the issue is.</p>
  
  <p>The exact message Fortify is giving:</p>
  
  <blockquote>
    <p>The method methodName() in CoCustomTag.java mishandles confidential information, which can compromise user privacy and is often illegal.</p>
  </blockquote>
  
  <p>Please ignore the open braces and all, as I have put here only the portion of code identified by Fortify.</p>