A Spring expression is built with a dynamic value. The source of the value(s) should be verified to avoid that unfiltered values fall into this risky code evaluation.
public static String getDynamicValue(String[] parameterNames, Object[] args, String key) {