Analysing of Classic ASP code

SonarQube Cloud
1

Hi Team, I trust you are all well. I wanted to find out if anyone came across a working solution on how to scan Classic ASP (.asp file extension) inside of Sonarcloud or not? I know Veracode has the option of doing it, so I am sure it is possible.

To share some background, Classic ASP is a scripting language and does not need compiling. One single file can include code from:
Javascript
VBScript
T-SQL
HTML

Example code:

<%@language=vbscript%>

<%
	Dim xxxx, yyyy, zzzz
	focusOn = 1

	'This is a comment
	Dim xxyy
	
	sqlString = "SELECT COUNT(*) AS Car FROM Vehicles WHERE Manufactureid=" & SESSION_ADMIN_ID & _
				" and t07_disabled=0"
	Call Rs.Open(sqlstring, Con, 0, 1)
	Car = Int(Rs("Car"))
	Call Rs.Close
%>	

<script language="javascript">
<!--
    var isValidBookingDate= true;
	var CarPart = new Array();
	<%		
		for i=0 to UBound(Suspension) - 1
			query = "SELECT TOP 1 Round(IsNull(Random,0), 2) AS Arm FROM Parts WHERE Suspension_ID=" & SESSION_ADMIN_ID() & " AND " &_
					"DayBook_ID='" & SC_String(Suspension(i, 0)) & "' ORDER BY Construction_Date DESC, Made_by_date DESC"
			Call RS.Open(query, Con, 0, 1)
			if(NOT RS.EOF) then
				%>CarPart[<%=i%>] = trim('<%=SC_JS(FormatVal(RS("Arm"), 2))%>');
				<%
			else
				%>CarPart[<%=i%>] = '0,00';
				<%
			end if
			RS.Close
		next
	%>
//-->
2

Hey there.

Just to provide the “native, built into SonarCloud” point of view, there’s nothing that particularly supports analyzing ASP code. You would need to extract the different languages into valid, standalone files for each language and then initiate an analysis.