What theory-grounded static analysis is supposed to buy youStatic analysis covers a range of techniques. Linters sit at one end: they parse the code into a syntax tree and match against shapes in that tree: eval() called with anything other than a string literal, a dynamic value assigned straight into .innerHTML, a shell command assembled by concatenating in a variable, a string literal that looks like a hardcoded API key.

Read the full article at Sonar →