How to fix Access Control: Android Provider

The code is simple, send ACTION_GET_CONTENT to let user pick an image, and in `onActivityResult`, call `intent.getData()` to get the uri, then query the something from content provider like `context.getContentResolver().query(uri)`,

This is a very common usage. Fortify complaints there is a problem with this line: `context.getContentResolver().query(uri)`. How do I fix this? I checked the explanation of Access Control: Android Provider, but I can't figure out what should I do.