
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Fortify SCA 17.20.0183 issues with ES6, and JS comments
When trying to scan an ember project that has been compiled to ES6 using `ember build -prod`, Fortify SCA sourceanalyzer throws various `[warning]: Unexpected exception while parsing file (javascript)`.
Fortify SCA seems to ignore the js comment symbols, `//`, and tries to translate comment strings. If I remove the comments, then there are of issues with proper es6 syntax. The JS file is not minimized, and is not silently thrown out by fortify as with ember decorated js files.
I don't see a lot of documentation on ES6 configs besides `com.fortify.sca.skip.libraries.ES6`, which didn't do anything, any ideas?
Thanks
```
sourceanalyzer -b test -clean
sourceanalyzer -b test script.js
```
Parse error at line 40005, column 17. Encountered: imported
```
// once imported , do something ...
```
Parse error at line 1895, column 31. Encountered: $
```
if (edge) {
edge.update(`#${color}`);
}
```
```
sourceanalyzer --version
Fortify Static Code Analyzer 17.20.0183 (using JRE 1.8.0_144)
```
Output of `fortifyupdate --showInstalledRules`:
```
Currently Installed Rulepacks in /home/b249020acaf7/HPE_Security/Fortify_SCA_and_Apps_17.20/Core/config/rules
(truncated)
Fortify Secure Coding Rules, Extended, JavaScript v2019.2.0.0009
(truncated)
```

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Ruled out env, issue happens in rhel/deb based systems.