github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-16 00:33:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixed bug in removing sources and javadoc JARs from analysis

Browse Source 
Former-commit-id: 044cbb59264adbc11f022b0b40e8a781b9c1a046
This commit is contained in:
Jeremy Long
2013-04-21 05:18:50 -04:00
parent 6925ed78f6
commit 43f0fa9e10
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java
View File

@@ -191,8 +191,10 @@ public class JarAnalyzer extends AbstractAnalyzer implements Analyzer {
addPackagesAsEvidence ^= Settings.getBoolean(Settings.KEYS.PERFORM_DEEP_SCAN);
analyzePackageNames(dependency, addPackagesAsEvidence);
if (!hasClasses
|| (dependency.getFileName().toLowerCase().endsWith("-sources.jar")
|| dependency.getFileName().toLowerCase().endsWith("-javadoc.jar"))) {
&& (dependency.getFileName().toLowerCase().endsWith("-sources.jar")
|| dependency.getFileName().toLowerCase().endsWith("-javadoc.jar")
|| dependency.getFileName().toLowerCase().endsWith("-src.jar")
|| dependency.getFileName().toLowerCase().endsWith("-doc.jar"))) {
engine.getDependencies().remove(dependency);
}
} catch (IOException ex) {