7.14
·
4584 commits
to master
since this release
Adjust security hotspots before the release of SonarQube 7.8. You can read about the difference between a security hotspot and vulnerability in the docs.
Improvements
- 2394 - [C#] Rule S2077: Update rule by detecting only formatted or concatenated strings
- 2387 - [C#, VB.NET] Fix S2068 FP: should not raise for empty string
- 2386 - Rule S4784: Update implementation to target only hard-coded regex
- 2385 - Remove Security Hotspot rules which are not targeting developers
- 2384 - Update S2255: Remove Cookie reading from Rule S2255
- 2139 - Fix S4056: Rule recommends overload with completely different signature
Bug Fixes
- 2392 - [C#] Fix StringFormatValidator NRE due to array instantiation w/o initializer