Hi Team, Can I check whether there are plans to include SQL Injection checks in the Sonar Lint plugin? This feature is very useful for the developers. Right now, I don’t see the plugin doing such checks.

Hi @bxblin , SonarLint - Can it checks for vulnerabilities such as SQL Injection? Short answer: no. We made multiple attempts of enabling advanced security rules in SonarLint, and so far it has not been successful. Those rules are based on a complex algorithm that is currently not IDE friendly, …

SonarLint - Can it checks for vulnerabilities such as SQL Injection?

SonarQube for IDE Visual Studio

Julien_HENRY (Julien Henry) Split this topic June 8, 2020, 8:16am 2

A post was split to a new topic: Unable to analyze JS files in Visual Studio 2019

Topic		Replies	Views
SonarLint for VSCode 3.12 - Enhanced investigation of taint vulnerabilities Releases vscode , sonarqube-ide	0	824	November 14, 2022
Getting started with SonarQube Lint in Visual Studio Code Visual Studio visualstudio , vscode , sonarqube-ide	1	3890	March 4, 2020
Does SonarQube detect SQL injection vulnerabilities in Community Edition? SonarQube Server / Community Build python	1	3256	October 29, 2023
Security Scanning with SonarQube? SonarQube Server / Community Build	5	2209	August 16, 2019
Sonarqube not detecting SQL injection in Java code SonarQube Server / Community Build	2	1242	March 25, 2021

SonarLint - Can it checks for vulnerabilities such as SQL Injection?

Related topics