False positive tainted input (JavaSecurity:S5145)

Hello @stevejagodzinski

for your first example with enum, it’s fixed since SonarQube 8.5, I recommend updating your SonarQube instance, if it doesn’t solve this false positive, let us know.

for your second example with Pattern, I just created a ticket to not raise anymore when the user-controlled input is validated with a regex, I will inform you when it’s released.

thank you for this feedback

Eric