 
                            ...
A third data reading issue arises from the behavior of the String class constructor with respect to the default encoding. See guideline FIO03IDS17-J. Specify the character encoding while performing file or network IO for more details.
...
FIO01-J. Do not expose buffers created using the wrap() or duplicate() methods to untrusted code 12. Input Output (FIO) FIO03IDS17-J. Specify the character encoding while performing file or network IO