From 9f5d7d1ac11adfe1933de8b6207e58743e1518f5 Mon Sep 17 00:00:00 2001
From: FredApps <153173854+FredApps@users.noreply.github.com>
Date: Tue, 10 Nov 2026 11:20:57 +0100
Subject: [PATCH] sonar: leave out the AEP corpus generators and document the
 expression eval wrappers

---
 sonar-project.properties | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/sonar-project.properties b/sonar-project.properties
index 23a37f67e..7d13a08c4 100644
--- a/sonar-project.properties
+++ b/sonar-project.properties
@@ -1,2 +1,16 @@
 sonar.projectKey=storytold_effectcraft
 sonar.organization=storytold
+
+# crates/aep/tests/fixtures/tools/ holds the contributor's offline generators of the AEP test
+# corpus (Node and ExtendScript run by hand against a local folder, see its README). They are not
+# shipped or run by the app or CI, so they are not analysed.
+sonar.exclusions=crates/aep/tests/fixtures/tools/**
+
+# S1523 / S2137 (eval, Function): the expression runtime in crates/expr/src/prelude.js replaces
+# `eval` and `Function` on purpose, with wrappers that check the code they are given before it
+# runs (After Effects expressions may call them). The rules flag exactly that wrapping.
+sonar.issue.ignore.multicriteria=prelude_eval,prelude_redefine
+sonar.issue.ignore.multicriteria.prelude_eval.ruleKey=javascript:S1523
+sonar.issue.ignore.multicriteria.prelude_eval.resourceKey=crates/expr/src/prelude.js
+sonar.issue.ignore.multicriteria.prelude_redefine.ruleKey=javascript:S2137
+sonar.issue.ignore.multicriteria.prelude_redefine.resourceKey=crates/expr/src/prelude.js