github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-27 11:31:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

removed wild card pattern matching during scan

Browse Source 
Former-commit-id: 183963237c378641467f7277f68ba74156442485
This commit is contained in:
Jeremy Long
2014-11-04 05:50:58 -05:00
parent 7ec2458fb5
commit 24b1c4d0a4
1 changed files with 2 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
dependency-check-core/src/main/java/org/owasp/dependencycheck/Engine.java
View File

@@ -193,23 +193,9 @@ public class Engine implements Serializable {
* @return the list of dependencies scanned * @return the list of dependencies scanned
*/ */
public List<Dependency> scan(String path) { public List<Dependency> scan(String path) {
if (path.matches("^.*[\\/]\\*\\.[^\\/:*|?<>\"]+$")) {
final String[] parts = path.split("\\*\\.");
final String[] ext = new String[]{parts[parts.length - 1]};
final File dir = new File(path.substring(0, path.length() - ext[0].length() - 2));
if (dir.isDirectory()) {
final List<File> files = (List<File>) org.apache.commons.io.FileUtils.listFiles(dir, ext, true);
return scan(files);
} else {
final String msg = String.format("Invalid file path provided to scan '%s'", path);
LOGGER.log(Level.SEVERE, msg);
}
} else {
final File file = new File(path); final File file = new File(path);
return scan(file); return scan(file);
} }
return null;
}
/** /**
* Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any * Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any