I would consider the information user provided/tainted, I think user could do BIA and replace the string after passing it to java, but before your program sees it
v
Vampire
12/27/2022, 12:01 PM
What do you actually need it for? You can e. g. also use
JAVA_TOOL_OPTIONS
to inject additional JVM arguments, or have a wrapper executable and so on.