False negative : java:S4288 issue not raised on Spring @RestController component

Rules and Languages Report False-positive / False-negative...
1
  • language : Java
  • rule : java:S4288
  • Why do you believe it’s a false-positive/false-negative?
    • SonarQube - 8.9.10
    • SonarLint - IntelliJ / 6.7.0.45926

Issue is correctly raised on @Service, @Controller but not @RestController (which is a controller and annoted @Controller)

To reproduced, change a class annotated @Controller that raises the issue and annotate with @RestController instead : no more issue.

2

This matches a previous request made here.

I’ve flagged this for attention by the right team internally.

:warning: Make sure you upgrade to SonarQube v9.9 LTS soon, not only to benefit from our Best LTS Ever™, but because soon we will systematically ask users to upgrade when they ask questions about earlier versions of SonarQube, which are now considered unsupported. :smiley:

6

Hey!

Thanks for the feedback and sorry for the long time responding. You are right, this is a FN, and it has not been fixed in the last LTS.
Ticket created to handle it: SONARJAVA-4537.

Cheers,
Michael

7

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.