From 60b8bde19af449b2b30335f5e3af2d452ced4110 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Thu, 20 Jul 2017 06:32:51 -0400
Subject: [PATCH] resolve false positive per issue #814

---
 .../src/main/resources/dependencycheck-base-suppression.xml   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 1227ccdbd..e9fd35f40 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -54,10 +54,12 @@
     </suppress>
     <suppress base="true">
         <notes><![CDATA[
-        Sandbox is a php blog platform and should not be flagged as a CPE for java or .net dependencies.
+        1. Sandbox is a php blog platform and should not be flagged as a CPE for java or .net dependencies.
+        2. Open media is php and won't be in a jar, dll, etc. See issue #814.
         ]]></notes>
         <filePath regex="true">.*(\.(dll|jar|ear|war|pom)|pom\.xml)$</filePath>
         <cpe>cpe:/a:sandbox:sandbox</cpe>
+        <cpe>cpe:/a:openmedia:openmedia</cpe>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[