Indeed, it’s not yet possible to detect this vulnerability thanks to SonarLint, so in your IDE. That’s not ideal and hopefully we will enable that feature sooner or later because we really want to provide such feedback as soon as possible to developers so while they are coding.
But, as I said before, you will detect this vulnerability by relying on a server analysis, so by using SonarQube Developer Edition or SonarCloud.io.