From: michaelbirnstiehl <michael.birnstiehl@sonarsource.com>
Date: Mon, 14 Sep 2020 21:24:04 +0000 (-0500)
Subject: SONAR-13688 add note about unquoted service path attacks for SQ as a service
X-Git-Tag: 8.5.0.37579~20
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=6a1ecd978e61061134fd53843096579c323add5a;p=sonarqube.git

SONAR-13688 add note about unquoted service path attacks for SQ as a service
---

diff --git a/server/sonar-docs/src/pages/setup/operate-server.md b/server/sonar-docs/src/pages/setup/operate-server.md
index 4db8cf8718d..c1cc9631149 100644
--- a/server/sonar-docs/src/pages/setup/operate-server.md
+++ b/server/sonar-docs/src/pages/setup/operate-server.md
@@ -5,6 +5,9 @@ url: /setup/operate-server/
 
 ## Running SonarQube as a Service on Windows
 
+[[warning]]
+| When installing SonarQube as a service on Windows, the path to the executable should be quoted to prevent unquoted service path attacks. 
+
 ### Install or Uninstall NT Service (may have to run these files via Run As Administrator):
 
 ```