github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-18 23:34:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

update per issue #1025

Browse Source
This commit is contained in:
Jeremy Long
2017-12-10 08:18:14 -05:00
parent 412b72540a
commit 7b561d559e
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
View File

@@ -63,6 +63,7 @@
7. Even if a node.js package exists - we aren't flagging the entire node.js 7. Even if a node.js package exists - we aren't flagging the entire node.js
8. Context project is drupal plugin 8. Context project is drupal plugin
9. mail_project is ruby library 9. mail_project is ruby library
10. ldap_project is part of type3 written in php
]]></notes> ]]></notes>
<filePath regex="true">.*(\.(dll|jar|ear|war|pom|nupkg|nuspec)|pom\.xml|package.json)$</filePath> <filePath regex="true">.*(\.(dll|jar|ear|war|pom|nupkg|nuspec)|pom\.xml|package.json)$</filePath>
<cpe>cpe:/a:sandbox:sandbox</cpe> <cpe>cpe:/a:sandbox:sandbox</cpe>
@@ -77,6 +78,7 @@
<cpe>cpe:/a:nodejs:nodejs</cpe> <cpe>cpe:/a:nodejs:nodejs</cpe>
<cpe>cpe:/a:context_project:context</cpe> <cpe>cpe:/a:context_project:context</cpe>
<cpe>cpe:/a:mail_project:mail</cpe> <cpe>cpe:/a:mail_project:mail</cpe>
<cpe>cpe:/a:ldap_project:ldap</cpe>
</suppress> </suppress>
<suppress base="true"> <suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
@@ -108,13 +110,14 @@
<cpe>cpe:/a:oracle:glassfish</cpe> <cpe>cpe:/a:oracle:glassfish</cpe>
<cpe>cpe:/a:oracle:glassfish_server</cpe> <cpe>cpe:/a:oracle:glassfish_server</cpe>
</suppress> </suppress>
<suppress base="true"> <!--suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
This was added to a broader suppression ruleg
Suppresses false positives on ldap_project (issue #165). Suppresses false positives on ldap_project (issue #165).
]]></notes> ]]></notes>
<gav regex="true">org\.forgerock\.opendj:opendj-ldap-sdk:.*</gav> <gav regex="true">org\.forgerock\.opendj:opendj-ldap-sdk:.*</gav>
<cpe>cpe:/a:ldap_project:ldap</cpe> <cpe>cpe:/a:ldap_project:ldap</cpe>
</suppress> </suppress-->
<suppress base="true"> <suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
Suppresses false positives on the org.opensaml:xmltooling Suppresses false positives on the org.opensaml:xmltooling
@@ -761,13 +764,15 @@
<gav regex="true">^org\.apache\.struts\.xwork:xwork-core:.*$</gav> <gav regex="true">^org\.apache\.struts\.xwork:xwork-core:.*$</gav>
<cpe>cpe:/a:apache:struts</cpe> <cpe>cpe:/a:apache:struts</cpe>
</suppress> </suppress>
<suppress base="true"> <!--suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
This was added to a broader suppression.
false positive per issue #908 false positive per issue #908
]]></notes> ]]></notes>
<gav regex="true">^com\.unboundid:unboundid-ldapsdk:.*$</gav> <gav regex="true">^com\.unboundid:unboundid-ldapsdk:.*$</gav>
<cpe>cpe:/a:ldap_project:ldap</cpe> <cpe>cpe:/a:ldap_project:ldap</cpe>
</suppress> </suppress-->
<suppress base="true"> <suppress base="true">
<notes><![CDATA[ <notes><![CDATA[
false positive per issue #894 false positive per issue #894