github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-20 16:24:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

resolve false positive per issue #814

Browse Source
This commit is contained in:
Jeremy Long
2017-07-20 06:32:51 -04:00
parent 5e8b012a5d
commit 60b8bde19a
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
View File

@@ -54,10 +54,12 @@
</suppress> </suppress>
<suppress base="true"> <suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
Sandbox is a php blog platform and should not be flagged as a CPE for java or .net dependencies. 1. Sandbox is a php blog platform and should not be flagged as a CPE for java or .net dependencies.
2. Open media is php and won't be in a jar, dll, etc. See issue #814.
]]></notes> ]]></notes>
<filePath regex="true">.*(\.(dll|jar|ear|war|pom)|pom\.xml)$</filePath> <filePath regex="true">.*(\.(dll|jar|ear|war|pom)|pom\.xml)$</filePath>
<cpe>cpe:/a:sandbox:sandbox</cpe> <cpe>cpe:/a:sandbox:sandbox</cpe>
<cpe>cpe:/a:openmedia:openmedia</cpe>
</suppress> </suppress>
<suppress base="true"> <suppress base="true">
<notes><![CDATA[ <notes><![CDATA[