Extend subnet exceptions from go:S1313 to include 3fff::/20

Rules and Languages Report False-positive / False-negative...
1

Hello,

I have had several false positive from go:S1313 lately, for IP addresses and CIDR prefixes located in the documentation subnet `3fff::/20`. This subnet is officially reserved for testing and documentation purposes as per RFC 9637, and I believe it should be added to the exception list from said rule (and other similar rules in other languages I suppose), as it already does have one for the similar subnet 2001:DB8::/32 standardized by RFC 3849.

My organization is running a self-hosted SonarQube Developer Edition, version v2026.2.1 at the moment.

To reproduce, use any Go source file with a string literal containing an IP address in said subnet, ie `testip := “3fff:0:0:4::31”`.

4

Hello @jqueuniet

Thank you for your report. You are right the subnet 3fff::/20 should not raise the issue for go:S1313 rule. I created a ticket to implement it.

Best
Marcin Stachniuk