Command injection in Java/es