SONARJAVA-6783: Implement rule S9345 Classes with throwing constructors should be protected against Finalizer attacks - #5981

Merged

romainbrenguier merged 21 commits into

romain/new-rule-s9345-sonarjava-6783

Aug 25, 2026

Commits on Aug 21, 2026

SONARJAVA-6783: Implement rule S9345 Classes with throwing constructors should be protected against Finalizer attacks

authored and
nathsou
committed
b8cc914
Update ruling results

github-actions[bot]
authored and
nathsou
committed
50133ac
SONARJAVA-6783: Fix compilation error, add Sonar way profile, and withoutSemantic test

authored and
nathsou
committed
ea06a0f
SONARJAVA-6783: Move primary location to throwing constructor with class as secondary

romainbrenguier
and
claude
committed
b04aa3b

Commits on Aug 24, 2026

SONARJAVA-6783: Fix NPE on anonymous classes, skip sealed classes, update rulings

romainbrenguier
and
claude
committed
210ab68
Update ruling results for PR #5981 (#5983)
github-actions[bot]
authored
f58ad99
Update ruling results for PR #5981 (#6000)
github-actions[bot]
authored
20b8c8e
SONARJAVA-6783: Address review feedback for S9345 FinalizerAttackCheck

romainbrenguier
and
claude
committed
09126f5
SONARJAVA-6783: Reduce cognitive complexity and add test coverage for S9345

romainbrenguier
and
claude
committed
f0c1680
Update ruling results for PR #5981 (#6007)
github-actions[bot]
authored
9cbfead
SONARJAVA-6783: Flag constructors when class has throwing initializers

romainbrenguier
and
claude
committed
e98ae92
Update ruling results
github-actions[bot]
committed
6630fc7
Update ruling results for eclipse-jetty-similar-to-main S9345

romainbrenguier
and
claude
committed
de2188c
SONARJAVA-6783: Fix duplicate branch code, reduce complexity, and add test coverage for S9345

romainbrenguier
and
claude
committed
a3aeff0
Merge remote-tracking branch 'origin/fix/update-ruling-for-romain/new-rule-s9345-sonarjava-6783' into romain/new-rule-s9345-sonarjava-6783
romainbrenguier
committed
3758ad1
SONARJAVA-6783: Add test coverage and merge ruling fix for S9345

romainbrenguier
and
claude
committed
695ec01
SONARJAVA-6783: Remove unused Symbol import in FinalizerAttackCheck

romainbrenguier
and
claude
committed
d03d535
SONARJAVA-6783: Reduce complexity, add test coverage for S9345

romainbrenguier
and
claude
committed
a4994f5
SONARJAVA-6783: Extract isThrowingInitializer to fix S1871 duplicate branch

romainbrenguier
and
claude
committed
6b66ea1

Commits on Aug 25, 2026

SONARJAVA-6783: Address PR review findings for S9345

romainbrenguier
and
claude
committed
3919b14
SONARJAVA-6783: Fix compilation error and update ruling results for S9345

romainbrenguier
and
claude
committed
7520446