Hey :slight_smile:, Using SonarQube v9.5.0.56709, I’m getting the phpsecurity:S5146 security-vulnerability warning on the following Symfony code: public function __invoke(Request $request) { ... $response = new RedirectResponse($request->getUri(), 303); ... return $response; } Bu…

S5146 false positive on Symfony RedirectResponse to self

Hendrik_Buchwald (Hendrik Buchwald) August 9, 2022, 2:33pm 3

Hi Bram,

Sorry for the late reply! It is indeed a false-positive. I have created an internal ticket for it, thanks for the report!

2 Likes

Topic		Replies	Views
False positive for php:S125 - commented out code Report False-positive / False-negative... php , vscode , sonarqube-ide	5	1067	December 1, 2020
PHP SQL Injection False Negative (S3649) Report False-positive / False-negative... php	5	1263	March 14, 2023
php:S1144 False positive first class callable Report False-positive / False-negative... php , sonarqube , php8	1	377	August 14, 2023
S1313 false positive on hardcoded IPs from the exception list Report False-positive / False-negative...	4	562	January 23, 2023
S5146 false positive? SonarQube Cloud java , security	6	1507	May 19, 2021