False negative : java:S4288 issue not raised on Spring @RestController component

  • language : Java
  • rule : java:S4288
  • Why do you believe it’s a false-positive/false-negative?
    • SonarQube - 8.9.10
    • SonarLint - IntelliJ /

Issue is correctly raised on @Service, @Controller but not @RestController (which is a controller and annoted @Controller)

To reproduced, change a class annotated @Controller that raises the issue and annotate with @RestController instead : no more issue.

This matches a previous request made here.

I’ve flagged this for attention by the right team internally.

:warning: Make sure you upgrade to SonarQube v9.9 LTS soon, not only to benefit from our Best LTS Ever™, but because soon we will systematically ask users to upgrade when they ask questions about earlier versions of SonarQube, which are now considered unsupported. :smiley:


Thanks for the feedback and sorry for the long time responding. You are right, this is a FN, and it has not been fixed in the last LTS.
Ticket created to handle it: SONARJAVA-4537.


This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.