Does sonar analyse the code for security issues in React JS or Node JS applications?

[Elangovan (Elangovan Shankar)]

Hi,

Do sonar analyse the code for security issues in React JS or Node JS applications?

SonarQube developer edition 8.1.

Thanks
Elangovan

[Antoine]

Hello @Elangovan,

Our analyzers for JS/TS already provide some global security related rules:

• JS Vulnerabilities
• JS Security Hotspots
• TS Vulnerabilities
• TS Security Hotspots

Though, a better Security analysis for JS/TS is one of our 2020 objectives, and is currently in progress, as you can see in MMF-1895: Make JS/TS analyzer a first class analyzer for Code Security.

I hope it will help.