SQL code in XML

SonarQube Server / Community Build
1

I’m evaluating use of SonarQube. We have a lot of SQL code in our project. We have the SQL code embedded in XML files in CDATA tags. Will SonarSouce scan SQL inside XML file tags?

Here is an example:

	<CreateFunctionSQL>
		<![CDATA[
create function dbo.UFN_STATUSBATCH
(
	@BATCHSPONSORSHIPID uniqueidentifier
)
returns table
as

return
(
	select
		ID
		,ROW_NUMBER() OVER (ORDER BY ID) AS SEQUENCE
	from 
		dbo.USR_BATCHSPONSORSHIPSTATUS
	where
		BATCHSPONSORSHIPID = @BATCHSPONSORSHIPID
);
	
		]]>
	</CreateFunctionSQL>
2

Hey there. It will not. The SQL code would need to be extracted to plain .sql files in order to be analyzed.

3

Thanks for your quick reply!

4

Is there any way to add this functionality on my own to the product?