Demo for SonarSource Webinar

The project is built on Travis CI: https://travis-ci.org/SonarSource/gh-webinar-demo Only the master branch and PRs are analyzed.

Java SAST features demo for the City Tour

Security Vulnerabilities

• https://rules.sonarsource.com/java/RSPEC-3649 - SQL Injection
• https://rules.sonarsource.com/java/RSPEC-2076 - Command Injection

Security Hotspots

• https://rules.sonarsource.com/java/RSPEC-2255 - Writing cookies is security-sensitive
• https://rules.sonarsource.com/java/RSPEC-4790 - Hashing data is security-sensitive