Java basic type conversion string interception injection filtering