title: How to fix CWE 829 - Inclusion of Functionality from Untrusted Control Sphere
body: <p>As part of veracode scan i got CWE 829 -Inclusion of Functionality from Untrusted Control Sphere error thrown.</p>
  
  <p>Below I have pasted my Java code and in line#3 i'm getting this vulnerability.</p>
  
  <p>I didn't find much about this issue. Can some one assist me if you have faced this kind of issue earlier?</p>
  
  <pre><code>import java.applet.Applet;
  import java.awt.Graphics;
  
  public class ShowVariables extends Applet { //Error shown in thos line
      int age = 35;
      double salary = 25000.34;
      long distance_to_the_moon = 235678;
  
      public void paint(Graphics g) {
          g.drawString("employees age: " + age, 5, 25);
          g.drawString("Employess salary: " + salary, 5, 45);
          g.drawString("Distance to the moon: " + distance_to_the_moon, 5, 65);
  
      }
  
  }
  </code></pre>