java:S6857 reporting for #{ expression using a variable

Rules and Languages Report False-positive / False-negative...
1
  • Java
  • java:S6857
  • SonarQube Server Enterprise Edition v10.8.1 (101195)

I have a spring boot project
in properties file I have

app.pagination.limit=10
provider.attribute_map={\
	'givenname': 'firstName', \
	'sn': 'lastName' \
}

In a Java class

@Value("#{T(java.lang.Math).min(50, ${app.pagination.limit})}")
private int paginationLimit;

@Value("#{${provider.attribute_map:T(java.util.Collections).emptyMap()}}")
Map<String, String> attributeMap;

The SPEL is properly evaluated assigning the variable to 10, but sonar is reporting “Correct this malformed SpEL expression.”

3

Hey there.

This is a known issue in progress of being fixed. SONARJAVA-4917

It should be fixed with SonarQube Server 2025.3, coming later this month.

:warning: Your version is past EOL. You should upgrade to either the latest version or the current LTA (long-term active version) at your earliest convenience. Your upgrade path is:

10.8 → 2025.1.1-> 2025.2 (last step optional)

You may find these resources helpful:

1 Like
4

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.