diff --git a/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionConfiguration.java b/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionConfiguration.java
index 8300fd9c5e..e6eae1af0d 100644
--- a/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionConfiguration.java
+++ b/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionConfiguration.java
@@ -126,6 +126,7 @@ public class ConnectionConfiguration
    * @return
    */
   @Override
+  @SuppressWarnings("squid:S2068")
   public String toString()
   {
     String pwd = null;
diff --git a/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionProvider.java b/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionProvider.java
index c1bd0738e4..65f8245f32 100644
--- a/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionProvider.java
+++ b/scm-dao-orientdb/src/main/java/sonia/scm/orientdb/ConnectionProvider.java
@@ -78,6 +78,7 @@ public class ConnectionProvider
   public static final String DEFAULT_DB_SHEME = "local:";
 
   /** Field description */
+  @SuppressWarnings("squid:S2068")
   public static final String DEFAULT_PASSWORD = "admin";
 
   /** Field description */
diff --git a/scm-dao-orientdb/src/main/java/sonia/scm/user/orientdb/UserConverter.java b/scm-dao-orientdb/src/main/java/sonia/scm/user/orientdb/UserConverter.java
index 7aabd57101..9753f21a19 100644
--- a/scm-dao-orientdb/src/main/java/sonia/scm/user/orientdb/UserConverter.java
+++ b/scm-dao-orientdb/src/main/java/sonia/scm/user/orientdb/UserConverter.java
@@ -76,6 +76,7 @@ public class UserConverter extends AbstractConverter implements Converter<User>
   public static final String FIELD_MAIL = "mail";
 
   /** Field description */
+  @SuppressWarnings("squid:S2068")
   public static final String FIELD_PASSWORD = "password";
 
   /** Field description */
diff --git a/scm-plugin-backend/pom.xml b/scm-plugin-backend/pom.xml
index cd37506db1..91355e5b35 100644
--- a/scm-plugin-backend/pom.xml
+++ b/scm-plugin-backend/pom.xml
@@ -111,6 +111,10 @@
 
   </dependencies>
 
+  <properties>
+    <sonar.exclusions>src/main/webapp/template/**</sonar.exclusions>
+  </properties>
+
   <build>
 
     <plugins>
diff --git a/scm-plugin-backend/src/main/java/sonia/scm/plugin/AdminAccountConfiguration.java b/scm-plugin-backend/src/main/java/sonia/scm/plugin/AdminAccountConfiguration.java
index 1b30b1228d..46bbc06c64 100644
--- a/scm-plugin-backend/src/main/java/sonia/scm/plugin/AdminAccountConfiguration.java
+++ b/scm-plugin-backend/src/main/java/sonia/scm/plugin/AdminAccountConfiguration.java
@@ -133,6 +133,7 @@ public class AdminAccountConfiguration implements SaltedAuthenticationInfo
    * @return
    */
   @Override
+  @SuppressWarnings("squid:S2068")
   public String toString()
   {
     //J-
diff --git a/scm-plugin-backend/src/main/java/sonia/scm/plugin/security/SecurityModule.java b/scm-plugin-backend/src/main/java/sonia/scm/plugin/security/SecurityModule.java
index b902696eef..9be130375e 100644
--- a/scm-plugin-backend/src/main/java/sonia/scm/plugin/security/SecurityModule.java
+++ b/scm-plugin-backend/src/main/java/sonia/scm/plugin/security/SecurityModule.java
@@ -80,6 +80,7 @@ public class SecurityModule extends ShiroWebModule
   private static final String PAGE_UNAUTHORIZED = "/error/unauthorized.html";
 
   /** Field description */
+  @SuppressWarnings("squid:S2068")
   private static final String PARAM_PASSWORD = "password";
 
   /** Field description */
diff --git a/scm-samples/scm-sample-auth/src/main/java/sonia/scm/sample/auth/SampleConfig.java b/scm-samples/scm-sample-auth/src/main/java/sonia/scm/sample/auth/SampleConfig.java
index 495f65c797..81d8e6b30b 100644
--- a/scm-samples/scm-sample-auth/src/main/java/sonia/scm/sample/auth/SampleConfig.java
+++ b/scm-samples/scm-sample-auth/src/main/java/sonia/scm/sample/auth/SampleConfig.java
@@ -76,6 +76,7 @@ public class SampleConfig
   //~--- fields ---------------------------------------------------------------
 
   /** Field description */
+  @SuppressWarnings("squid:S2068")
   @XmlElement(name = "password-suffix")
   private String passwordSuffix = "123";
 }
diff --git a/scm-webapp/pom.xml b/scm-webapp/pom.xml
index 0c12b51ed2..735b7ea332 100644
--- a/scm-webapp/pom.xml
+++ b/scm-webapp/pom.xml
@@ -542,6 +542,10 @@
     <maven.version>3.0.5</maven.version>
     <mustache.version>0.8.17</mustache.version>
     <netbeans.hint.deploy.server>Tomcat</netbeans.hint.deploy.server>
+    <sonar.issue.ignore.multicriteria>e1</sonar.issue.ignore.multicriteria>
+    <sonar.issue.ignore.multicriteria.e1.ruleKey>javascript:S3827</sonar.issue.ignore.multicriteria.e1.ruleKey>
+    <sonar.issue.ignore.multicriteria.e1.resourceKey>**.js</sonar.issue.ignore.multicriteria.e1.resourceKey>
+    <sonar.exclusions>src/main/webapp/resources/extjs/**,src/main/webapp/resources/moment/**,src/main/webapp/resources/syntaxhighlighter/**</sonar.exclusions>
   </properties>
 
   <profiles>