SONARJAVA-725 SQL should be sanitized