š Hi there, Iām Loris!
I work at @SonarSource as an AppSec Researcher.
My job consists in contributing to the š³ Sonar AppSec team š³.
- We ensure Sonar's analyzers do not raise false positive and false negative issues.
- We write the text that Sonar products (such as SonarQube) raise. Here is an example.
- We bring new security issues to detect into Sonar's analyzers.
You can vote on what I should work on next in this portal, under "Languages and Analysis Technologies." I am specialized in security issues, so if you vote for a card called "Detect Server-Side Template injection," I am going to work on it! š
Do not hesitate to reach out to my team or me by posting in our Community Forum. If the post is about security analysis capabilities, I might be the one to respond š±
And if you specifically want to talk to me, open a Pull Request in the loris-s-sonarsource/loris-s-sonarsource repository š
Cheers!