I found rules java in https://rules.sonarsource.com/java/ has this rules Dynamic code execution should not be vulnerable to injection attacks HTTP request redirections should not be open to forging attacks Deserialization should not be vulnerable to injection attacks Endpoints should not be vulner…

Hello Minh, As expressed in these other threads: Can't find rule S2078, S2076 Rule S2083 is not found in the server's rules list These rules are only available for our commercial editions of SonarQube :sonarqube: , or for Open Source project on SonarCloud :sonarcloud:. You consequently won’t fin…

Can not find injection attacks rules for Java on SonarQube Community edition

SonarQube Server / Community Build

Michael (Michael Gumowski) December 11, 2019, 8:19am 2

Hello Minh,

As expressed in these other threads:

These rules are only available for our commercial editions of SonarQube , or for Open Source project on SonarCloud :sonarcloud:. You consequently won’t find them in the community edition.

Regards,
Michael

Topic		Replies	Views
Rules available in which Sonarqube edition SonarQube Server / Community Build java , sonarqube , rules	1	812	December 12, 2019
SonarQube security rules - Community, Developer, other editions SonarQube Server / Community Build security	5	4042	July 20, 2020
Java: 5 additional Injection Vulnerability detection rules (NoSQL, Thread Suspensions, Reflection, JSON, XML) Sonar Updates java , security , sast , taint-analysis	1	1616	May 11, 2023
Rule S2083 is not found in the server's rules list SonarQube Server / Community Build java , sonarqube	4	1705	June 5, 2019
Can't find rule S2078, S2076 SonarQube Server / Community Build sonarqube	2	1643	June 20, 2019

Can not find injection attacks rules for Java on SonarQube Community edition

Related topics