Home

Sonar's latest blog posts

Featured Post

Solving the Engineering Productivity Paradox

Sonar CEO, Tariq Shaukat, shares how AI-generated code absolutely must be reviewed before it's merged into your codebase, and how SonarQube can help. 

Read More
https://assets-eu-01.kc-usercontent.com:443/5a869490-919a-0159-3da4-b8c3c397c0bc/ce96a6a2-8adf-4c7d-80d0-41124768484b/Engineering%20Productivity%20Paradox_blog-square%402x%20copy%202.png
Picture showing SonarQube 10.4 release
Blog post

SonarQube Server 10.4 Release Announcement

The SonarQube Server 10.4 release includes some exciting changes that show the benefit of Clean Code and the Clean as You Code methodology. Scan times are faster and connecting to SonarQube for IDE is easier. Sonar is introducing easy onboarding for GitLab, new support for Helm Charts, and much more.

Read article >

Image for Pitfalls of Desanitization: Leaking Customer Data from osTicket
Blog post

Pitfalls of Desanitization: Leaking Customer Data from osTicket

The dangerous Desanitization pattern led to an XSS vulnerability in the open-source helpdesk software osTicket, which can be used to leak customer data.

Read article >

Get new blogs delivered directly to your inbox!

Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.

I do not wish to receive promotional emails about upcoming SonarQube updates, new releases, news and events.

By submitting this form, you agree to the storing and processing of your personal data as described in the Privacy Policy and Cookie Policy. You can withdraw your consent by unsubscribing at any time.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Image for Juliet C# Benchmark and the SecureString case
Blog post

Juliet C# Benchmark and the SecureString case

Juliet C# is a project from the National Institute of Standards and Technology of the USA. As a security benchmark project, we used Juliet C# 1.3 to test and improve our C# analyzer. Here is a glimpse of the work we did around Juliet and some of its test cases related to the SecureString .NET type.

Read article >

Image for Who are you? The Importance of Verifying Message Origins
Blog post

Who are you? The Importance of Verifying Message Origins

This blog post highlights the importance of verifying the origin of JavaScript message events and outlines the potential impact of omitting this by detailing two critical vulnerabilities in the Squidex application.

Read article >

Image for Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins
Blog post

Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins

This blog uncovers two vulnerabilities, a Critical and High severity, recently discovered by our research team. Exploiting these vulnerabilities, attackers have the potential to gain Remote Code Execution on a Jenkins instance.

Read article >

Image of Blazor support by Sonar
Blog post

Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows

Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows

Read blog post >

The SonarQube and React logos
Blog post

Lessons learned upgrading to React 18 in SonarQube Server

We share the biggest three issues we faced and the lessons we learned as we upgraded SonarQube Server to React 18.

Read blog post >

Image for Will the new judicial ruling in the Vizio lawsuit strengthen the GPL?
Blog post

Will the new judicial ruling in the Vizio lawsuit strengthen the GPL?

Last week an important judicial ruling came down on a very intriguing case about open source license compliance. In this post, I'll talk about what makes it so interesting and potentially impactful across our industry.

Read article >

Image for Vulnerability Research Highlights 2023
Blog post

Vulnerability Research Highlights 2023

Our Vulnerability Research team looks back at a great year and summarizes the highlights of 2023.

Read article >

Image for Sonar's Scoring on the Top 3 Python SAST Benchmarks
Blog post

Sonar's Scoring on the Top 3 Python SAST Benchmarks

We're excited to share not only how Sonar performs on Python benchmarks but also the ground truth corresponding to the list of expected and not-so-expected issues.

Read article >

Image for 2024 DevOps Predictions from the Sonar Developer Advocate Team
Blog post

2024 DevOps Predictions from the Sonar Developer Advocate Team

The Developer Advocate team shares their predictions on what they foresee for DevOps trends and hot topics in 2024.

Read article >

  • Follow SonarSource on Twitter
  • Follow SonarSource on Linkedin
language switcher
English

© 2008-2025 SonarSource SA. All rights reserved.