What is the best methodology to remediate the SQL Injection vulnerability in a Java based web application?
Use the com.tcs.sapi.io.ValidationUtil.encodeForOraSQL(String input) method
Use PreparedStatement constructs and use the setXXX methods on the PreparedStatement object
Use the Java createStatement construct to execute the query
Concatenate your SQL string together using dynamic input and create and execute a PreparedStatement object using that query