The following issue is being reported in SonarCloud: Some thymeleaf templates are not indexed : you may want to add “src/main/resources” in the scanned files of this project to detect java XSS vulnerabilities We are using Azure DevOps with the SonarCloudPrepare and SonarCloudPublish tasks and can’…

Hello, For reference, here is the entry related to your question in the SonarCloud’s documentation: https://sonarcloud.io/documentation/analysis/languages/java/#analysing-jsp-and-thymeleaf-for-xss-vulnerabilities Alex

Resolved myself.For anyone else simply add:- <sonar.sources>src/main/java,src/main/resources/templates</sonar.sources> to your POM.

@Alexandre_Gigleux That link does exist anymore. Is that the new link: Java | SonarCloud Docs ?

Hey @kistlers Yes, that’s the new link.

Thymeleaf templates are not indexed : you may want to add “src/main/resources” in the scanned files

SonarQube Cloud

andye2004 (Andy Elliott) September 10, 2020, 2:41am 2

Anyone?

How to index thymeleaf templates in Gradle multi module project

Topic		Replies	Views
How to index thymeleaf templates in Gradle multi module project SonarQube Cloud sonarqube , gradle	1	1273	January 4, 2021
When i check java project, i want to check xml files too SonarQube Server / Community Build xml , java	1	636	July 21, 2022
Thymeleaf errors appears SonarQube Cloud java , security , sonarqube-cloud	9	2376	February 26, 2020
Scanning CloudFormation JSON templates using the CloudFormation Profile in SonarQube SonarQube Server / Community Build sonarqube , scanner , json	10	1325	August 19, 2024
Sonar 8.9 unknown files when analyze with MAVEN SonarQube Server / Community Build java , sonarqube , scanner	3	597	September 30, 2022

Thymeleaf templates are not indexed : you may want to add “src/main/resources” in the scanned files

Related topics