title: Getting Cross-site scripting (XSS) coverity issue as passing string input in java controller method
body: <p>@POST
  public Response method1(@QueryParam String input){
  ...
  }</p>
  <p>Here input is normal string and not html content.
  As I am processing input directly, getting coverity issue -
  tainted_source: Entering this function as a framework entry point. Parameter input is tainted because it comes from an HTTP request.</p>
  <p>How to sanitize input to avoid this issue?</p>