Status of JS Rule 3271

SonarQube
1

https://rules.sonarsource.com/javascript/RSPEC-3271 states that this rule (usage of local storage) is deprecated and will be removed. Does this mean that usage of local storage (and session storage) will no longer be considered a vulnerablity? When will the rule be removed?

2

Hey there.

It was deprecated because…

  • No compliant solution to propose
  • Could be noisy, localStorage / sessionStorage use is very common

It will be dropped in a future, currently unspecified release.