Sonar Blog

Home

Blog

Sonar's latest blog posts

Featured Post

What is Clean Code?

If you’ve followed us for a while, you most likely noticed that we changed the way we describe what we do: from “code quality” to “continuous code inspection,” then “code quality and code security”… to Clean Code.


But what is Clean Code, and what does it encompass?

Read More
https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/ddb995eb-cb89-4435-82fb-1b937cdf11dc/what_is_clean_code_blog_feature.webp
https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/bc352588-9c6f-4da9-ad87-305da97379c5/open_source_summit_summary_blog_index.webp
Blog Post

Open Source Summit 2023

Open Source Summit 2023

Read blog post >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/966004b2-df51-4096-b4e1-676024cbd862/cognitive-complexity-guide_hero-index.webp
Blog post

5 Clean Code Tips for Reducing Cognitive Complexity

Understanding how Cognitive Complexity works will help guide you on where to focus your time. This blog dives into how this Sonar-exclusive metric was formulated to accurately measure the relative understandability of methods.

Read article >

Get new blogs delivered directly to your inbox!

Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/e36b96c9-2703-4d5c-9fe2-bc821c5eaaee/stealing_with_style_tutanota_blog_index_v2.webp
Blog post

Remote Code Execution in Tutanota Desktop due to Code Flaw

Our Research team discovered critical code vulnerabilities in Proton Mail, Skiff, and Tutanota. This post covers an XSS vulnerability in Tutanota Desktop and how it can be prevented.

Read article >

Java JDK 21 LTS features
Blog post

The new JDK LTS is out! Long live JDK 21! Well, for the next 8 years.

Let's check what the new Java JDK21 LTS brings

Read blog post >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/4289fda4-078a-471e-8279-a4f2aec97ef0/enhancing_software_dev_through_sq_blog_feature.webp
Blog post

Enhancing Software Development Practices through SonarQube: A Path to Continuous Learning

With SonarQube, organizations can readily deploy workflows integrated directly into their pipelines to build on their teams’ skill sets and create resiliency to new risks.

Read article >

Get the benefits of TypeScript without writing TypeScript
Blog post

Typing your JavaScript without writing TypeScript

TypeScript already understands JavaScript, but you can get more out of it when you add types to your JavaScript with JSDoc or TypeScript declaration files

Read blog post >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/335fcf6a-370b-44cf-b1c0-70a0943d9c66/stealing_with_style_skiff_blog_index_v3.webp
Blog post

Code Vulnerabilities Put Skiff Emails at Risk

Our Research team discovered critical code vulnerabilities in Proton Mail, Skiff, and Tutanota. This post covers the technical details of the XSS vulnerability in Skiff.

Read article >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/d2904482-a417-4538-a97a-71dd20e227b0/security_guy_tv_interview_blog_index.webp
Blog post

Security Guy TV Interview - Going Deeper with SAST and Clean Code

Sonar CEO, Olivier Gaudin, and Head of Research and Development, Johannes Dahse, meet with Security Guy TV’s Chuck Harold to discuss deeper SAST and the importance of Clean Code.

Read article >

Get the benefits of TypeScript without writing TypeScript
Blog post

Get the benefits of TypeScript in your JavaScript

Let's dive into what you can do to get more and more of TypeScript's benefits in your JavaScript projects.

Read blog post >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/d397fc0e-7eee-427a-8f60-43de4e4d1fd3/sq-10-2_blog-index.webp
Blog post

Introducing SonarQube 10.2: Setting New Standards in Code Quality and Security

Discover the new features in SonarQube 10.2!

Read article >

https://assets-eu-01.kc-usercontent.com:443/2f74d567-9b00-0192-a4f8-032a70afc052/559de609-ecc9-4374-84cf-fbf76585abe7/stealing_with_style_protonmail_blog_index_v3.webp
Blog post

Code Vulnerabilities Put Proton Mails at Risk

The Sonar Research team discovered critical code vulnerabilities in Proton Mail, Skiff and Tutanota. This post covers the technical details of the XSS vulnerability in Proton Mail.

Read article >