PHP Array keys should be treated unsafe when coming from external content as they may be associative

Clean Code Report False-positive / False-negative...
1

A false negative was acknowledged in April by your team resulting in your internal JIRA ticket as APPSEC-615 (Log in with Atlassian account)

Language: PHP
SQL Injection
Details can be found in your JIRA ticket APPSEC-615
SonarQube 10.2 still did not cover it

Please inform me about the status.

Your team already has the code to reproduce, also see attached screenshot.

example
example518×533 44.7 KB

2

The ticket remains in the backlog with no specific ETA. Sorry I don’t have more information for you!