Hi, We’ve detected a possible security issue in SonarQube. Repro steps: Go to Administration > Configuration > General Settings. Enter in “About page text” field: aaa[image]bbb [image] Go to about page. JavaScript message is shown. [image] which versions are you using (SonarQube 7.3…

XSS Attack Prevention

Alexandre_Gigleux (Alexandre Gigleux) May 2, 2019, 7:09am 10

Thanks

Topic		Replies	Views
Trying to use SonarQube to detect XSS vulnerabilities in JS SonarQube Server / Community Build javascript , security , xss	4	3196	August 21, 2023
SonarQube Community - Unable to detect issues SonarQube Server / Community Build sonarqube , scanner , community	1	16	November 21, 2024
Require technical details for SonarQube 7.9.1 LTS (mentioned in Description below) SonarQube Server / Community Build	0	615	November 5, 2020
Not detected XSS Vulnerability Sonarqube SonarQube Server / Community Build sonarqube , xss	3	587	January 26, 2024
No security vulnerabilities caught in very basic servlet application SonarQube Server / Community Build security	1	363	July 8, 2021