Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities
Static analysis grounded in the formal theory of program analysis, rather than in shallow, syntax-driven heuristics, can compute precise data-flow paths through real, unmodified production code.
Gitar Blog12 min read
