Missing Sec Rules?!?

SonarQube Server / Community Build
1

Hi all,

All VersionsCan anyone confirm or deny this rule is utilised in any version of SQ?

https://rules.sonarsource.com/java/tag/injection/RSPEC-2083

2

Hi,

see https://next.sonarqube.com/sonarqube/coding_rules?q=S2083

Gilbert

3

Thanks Gilbert I meant NOT sonarCloud, sorry for not being specific

4

Injection vulnerability detection rules are available in Developer Edition (and above) and SonarCloud :slight_smile:

5

I can’t find it in EE or LTS?

6

To make a more complex matter simple, let’s also just say you should be running v7.9 LTS to take advantage of all existing rules that fall under that category. (These rules were not in their current form in 6.7 LTS, if they existed at all)

1 Like
7

Ahh got yer thx Colin