...
To further limit the exposure time of the sensitive password, follow the rule MSC10-J. Limit the lifetime of sensitive data by replacing replace BufferedReader with a direct NIO buffer, which can be cleared immediately after use.
Noncompliant Code Example (hardcoded database password)
...