What would be the best way to get cookies from HttpServletRequest object?

Question

I have a method which is returning the cookie value, getting the cookie from an auto-wired HttpServletRequest object. I'm adding the same cookie to call another service in restClient. Everything is working fine, but when I ran Fortify scan, it has given a high-priority issue that request.getCookies() can cause Server-Side Request Forgery. What to do in this case?

I've tried validating the cookie string by doing this

StringEscapeUtils.escapeXml(StringEscapeUtils.escapeHtml(StringEscapeUtils.escapeJavaScript(cookie.getValue())));

But its of no use.

The code is as follows:

Cookie[] cookies = request.getCookies();

if (cookies == null ) {
    return EMPTY;
}

for (Cookie cookie : cookies) {
    if (HeaderConstant.ASESSIONID.equals(cookie.getName())) {
        return StringEscapeUtils.escapeXml(
               StringEscapeUtils.escapeHtml(
               StringEscapeUtils.escapeJavaScript(
               cookie.getValue())));
    }
}

So fortify is highlighting this line "Cookie[] cookies = request.getCookies();" as Server side request forgery