Fix the security issue about java-sdk