We’re using 9.0.1 version of the Enterprise Edition of SonarQube. I was reading an article the other day and came across a new unicode bidirectional security issue and wondered if SonarQube scans for this? I searched the existing rules and couldn’t find any mention of it but wanted to confirm. If SonarQube does not currently cover this issue, are there plans to?
Brian.Flynn
(Brian Flynn)
1
felipebz
(Felipe Zorzo)
2
No, it doesn’t. Ref: Highlight Unicode BIDI characters as Security Hotspot
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Highlight Unicode BIDI characters as Security Hotspot | 6 | 1747 | November 29, 2021 | |
| CVE-2021-45105 vulnerability fix | 1 | 1402 | December 20, 2021 | |
| Can Sonarqube detect CVE-2021-44228 | 0 | 667 | December 13, 2021 | |
| Depencencies' vulnerabilities on Sonarqube Community 10.0.0 | 2 | 457 | June 8, 2023 | |
| Not seeing any CVE vulnerabilities? | 3 | 5910 | March 18, 2025 |