Can not find injection attacks rules for Java on SonarQube Community edition

[Minh_duc_Huy_nghia (Minh Duc)]

I found rules java in https://rules.sonarsource.com/java/ has this rules

• Dynamic code execution should not be vulnerable to injection attacks
• HTTP request redirections should not be open to forging attacks
• Deserialization should not be vulnerable to injection attacks
• Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks
• Database queries should not be vulnerable to injection attacks
• Regular expressions should not be vulnerable to Denial of Service attacks
• XPath expressions should not be vulnerable to injection attacks

But I can’t found in my sonarqube with plugin sonarJava 5.11.

[Michael (Michael Gumowski)]

Hello Minh,

As expressed in these other threads:

• Can't find rule S2078, S2076
• Rule S2083 is not found in the server's rules list

These rules are only available for our commercial editions of SonarQube , or for Open Source project on SonarCloud . You consequently won’t find them in the community edition.

Regards,
Michael