I am running a scan of front-end code, all JavaScript, using SonarScanner. The version of SonarQube server being used is 7.7.0.23042 It is concerning that on the SonarQube portal, seeing only 7 vulnerability rules for the JavaScript. [“alert(…)” open=javascript%3AS1442&rule_key=javascript%3AS1442…

JavaScript scanning rules

ashish2_sapra2 (Ashish Sapra) August 3, 2020, 3:18pm 3

Great! when are these changes planned for?

Topic		Replies	Views
Does Sonarqube catch OWASP Top 10 vulnerabilities for NodeJS / JavaScript SonarQube Server / Community Build javascript , sonarqube , node	5	1252	May 3, 2022
Additional Javascript and Typescript rules from Developer License are ignored by SonarQube SonarQube Server / Community Build javascript , typescript , sonarqube , scanner	1	540	July 28, 2022
Javascript rule vilation S3776 Plugin Development sonarqube	2	307	November 14, 2023
Unable to open the rule in SonarQube SonarQube Server / Community Build sonarqube	11	734	January 4, 2021
Trying to use SonarQube to detect XSS vulnerabilities in JS SonarQube Server / Community Build javascript , security , xss	4	3208	August 21, 2023