What language is this for? Java Which rule? javasecurity:S5145 Why do you believe it’s a false-positive/false-negative? We are using Spring Boot with Servlet. We use methods in Controllers like so: @PostMapping(path = Endpoints.SOME_ENDPOINT + "/entanglement", params = "Id") @PreAuthorize(…

Hello @govenny , Thanks for raising this post, I think I have an idea of what is going wrong here. Can you show me the list of flows on the side of the issue please? It looks like that, and you can anonymize/remove the file names if it is required by your company: [{D5D1E935-6A85-4DE1-A2AF-C8706D…

Hi Loris, thanks for getting back to me. Here you go: [Bildschirmfoto vom 2025-06-05 16-03-23] [Bildschirmfoto vom 2025-06-05 16-03-37] [Bildschirmfoto vom 2025-06-05 16-04-24]

Thanks a lot ! This is what I thought. I was looking for whether the flows would mention dependencies, and bingo. You can set this as an FP for now and I will research this internally. To answer your question, we might have found that the dependency can add a log message with this data, but this mi…

javasecurity:S5145 for MessageSource

Rules and Languages Report False-positive / False-negative...

govenny (Benny) June 5, 2025, 2:09pm 5

Hi Loris,

thanks for getting back to me. Here you go:

Topic		Replies	Views
False positive tainted input (JavaSecurity:S5145) SonarQube Cloud java , security	5	3817	May 3, 2021
javasecurity:S5145 false positives Report False-positive / False-negative...	6	1188	June 13, 2023
Issue with AbstractMessageSource class for methods getMessage in Spring 5 SonarQube Server / Community Build java , sonarqube , spring	3	695	October 12, 2021
Spring Controller @AuthenticationPrincipal object treated as tainted for "user-controlled" info Report False-positive / False-negative... java , security , spring	9	3133	October 31, 2023
Taint Vulnerabilities - JavaSecurity:S5145 false positive SonarQube Server / Community Build java , sonarqube , security , spring , taint-analysis	2	1662	April 4, 2023

javasecurity:S5145 for MessageSource

Related topics