Java: False positive in java/path-injection, file path sanitizer is not taken into account.

[xcorail]

Following a FP report, we see that even if the file path is checked for .., an alert is still reported. There should be an additional sanitizing guard such as !var.contains("..") in the query

[s0]

Fixed in #1718