Exclude SonarCloud S5145 false positive log injection warnings

This commit is contained in:
admin 2025-12-18 21:08:44 -06:00
parent fd2f703f52
commit c674213d5f

13
sonar-project.properties Normal file
View file

@ -0,0 +1,13 @@
# SonarCloud Configuration for Aletheia
sonar.projectKey=cheir-mneme_aletheia
sonar.organization=cheir-mneme
# Exclude false positive log injection warnings
# SanitizeForLog() extension method sanitizes all user input before logging
# but SonarCloud doesn't recognize custom sanitizers
sonar.issue.ignore.multicriteria=e1
# S5145: Log injection - false positive, using SanitizeForLog() sanitizer
sonar.issue.ignore.multicriteria.e1.ruleKey=roslyn.sonaranalyzer.security.cs:S5145
sonar.issue.ignore.multicriteria.e1.resourceKey=**/*.cs