From 76333b86472dc52efdb79afb616c6e441945f80c Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Fri, 19 Jun 2015 05:39:31 -0400 Subject: [PATCH] patch to resolve issue #255 Former-commit-id: 0e3f3081929a4bd93ea14a7379567f2f0c776b02 --- .../java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java index eb96f9b80..a44b7f5f5 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java @@ -123,8 +123,7 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer { "ipojo-extension", "eclipse-sourcereferences"); /** - * Deprecated Jar manifest attribute, that is, nonetheless, useful for - * analysis. + * Deprecated Jar manifest attribute, that is, nonetheless, useful for analysis. */ @SuppressWarnings("deprecation") private static final String IMPLEMENTATION_VENDOR_ID = Attributes.Name.IMPLEMENTATION_VENDOR_ID @@ -567,7 +566,7 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer { //Description final String description = pom.getDescription(); - if (description != null && !description.isEmpty()) { + if (description != null && !description.isEmpty() && !description.startsWith("POM was created by")) { foundSomething = true; final String trimmedDescription = addDescription(dependency, description, "pom", "description"); addMatchingValues(classes, trimmedDescription, dependency.getVendorEvidence());