Rule S2077: support for additional database libraries #3905
Labels
Area: C#
C# rules related issues.
Area: Security
Related to Vulnerability and Security Hotspot rules
Area: VB.NET
VB.NET rules related issues.
Milestone
S2077 should follow rule S3649 (all the sinks defined in S3649 should be supported in S2077)
Like: PetaPoco, OrmLite, Dapper, NHibernate, etc.
Related discussions:
Fix S2077 FN: consider also variable declarators #2800 (comment)
https://jira.sonarsource.com/browse/RSPEC-4873?focusedCommentId=232648&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-232648
Dapper Rule S2077: support for additional database libraries: Dapper #6177
EntityFramework (not core, but fw) Rule S2077: support for additional database libraries: EF6 #6188
EntityFramework core - see: S2077 rule is not triggered for EF core 3.1 and up #4533 Fix S2077: Update false FN in unit tests for EF core #6186
Owin (Is this Katana? If so, I can not find anything database related in the docs.)
Microsoft.SqlServer.Compact (aka SQL CE, already supported)
NHibernate Rule S2077: support for additional database libraries: NHibernate #6193
PetaPoco Rule S2077: support for additional database libraries: PetaPoco #6192
OrmLite Rule S2077: support for additional database libraries: OrmLite #6194
System.Data.Odbc (Already supported)
System.Data.SqlClient (Already supported), but the newer Microsoft.Data.Sqlclient is missing (Created Fix S2077 FN: Add support for Microsoft SqlClient Data Provider for SQL Server #6205 and informed AppSec)
MySql (Already supported), but there are alternative providers to the Oracle one out there: https://mysqlconnector.net/
The text was updated successfully, but these errors were encountered: