github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-14 07:43:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

patch to resolve issue #255

Browse Source 
Former-commit-id: 0e3f3081929a4bd93ea14a7379567f2f0c776b02
This commit is contained in:
Jeremy Long
2015-06-19 05:39:31 -04:00
parent ce7d12e850
commit 76333b8647
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java
View File

@@ -123,8 +123,7 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer {
"ipojo-extension",
"eclipse-sourcereferences");
/**
* Deprecated Jar manifest attribute, that is, nonetheless, useful for
* analysis.
* Deprecated Jar manifest attribute, that is, nonetheless, useful for analysis.
*/
@SuppressWarnings("deprecation")
private static final String IMPLEMENTATION_VENDOR_ID = Attributes.Name.IMPLEMENTATION_VENDOR_ID
@@ -567,7 +566,7 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer {
//Description
final String description = pom.getDescription();
if (description != null && !description.isEmpty()) {
if (description != null && !description.isEmpty() && !description.startsWith("POM was created by")) {
foundSomething = true;
final String trimmedDescription = addDescription(dependency, description, "pom", "description");
addMatchingValues(classes, trimmedDescription, dependency.getVendorEvidence());