SonarQube is unable to detect SQL Injection

Hi,

SonarQube is unable to detect SQL Injection in .ASHX ASP. Net Web.
We are currently using SonarQube Developer Edition
Version: 10.5.0.89998.
Please advise.

Hey there.

I’ve moved your post to the section on reporting false-negatives.

Please review this post:

And include a complete reproducer (code).