👋 Hi there, I’m Loris!

I work at @SonarSource as an AppSec Researcher.

My job consists in contributing to the 🐳 Sonar AppSec team 🐳.

• We ensure Sonar's analyzers do not raise false positive and false negative issues.
• We write the text that Sonar products (such as SonarQube) raise. Here is an example.
• We bring new security issues to detect into Sonar's analyzers.

You can vote on what I should work on next in this portal, under "Languages and Analysis Technologies." I am specialized in security issues, so if you vote for a card called "Detect Server-Side Template injection," I am going to work on it! 🎉

Do not hesitate to reach out to my team or me by posting in our Community Forum. If the post is about security analysis capabilities, I might be the one to respond 😱

And if you specifically want to talk to me, open a Pull Request in the loris-s-sonarsource/loris-s-sonarsource repository 😉

Cheers!