diff --git a/dependency-check-core/xref-test/org/owasp/dependencycheck/data/cpe/package-frame.html b/dependency-check-core/xref-test/org/owasp/dependencycheck/data/cpe/package-frame.html
index d38d2744b..d5b6480dd 100644
--- a/dependency-check-core/xref-test/org/owasp/dependencycheck/data/cpe/package-frame.html
+++ b/dependency-check-core/xref-test/org/owasp/dependencycheck/data/cpe/package-frame.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nexus
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nexus
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nexus
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nexus
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nuget
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nuget
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nuget
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nuget
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.xml
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.xml
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.xml
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.xml
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.suppression
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.suppression
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.suppression
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.suppression
73 @Test
74 public void testDelete() throws Exception {
75
-76 File file = File.createTempFile("tmp" , "deleteme" );
+76 File file = File.createTempFile("tmp" , "deleteme" , Settings.getTempDirectory());
77 if (!file.exists()) {
78 fail("Unable to create a temporary file." );
79 }
diff --git a/dependency-check-core/xref-test/org/owasp/dependencycheck/utils/package-frame.html b/dependency-check-core/xref-test/org/owasp/dependencycheck/utils/package-frame.html
index 9ed58914b..f4c876d1e 100644
--- a/dependency-check-core/xref-test/org/owasp/dependencycheck/utils/package-frame.html
+++ b/dependency-check-core/xref-test/org/owasp/dependencycheck/utils/package-frame.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
diff --git a/dependency-check-core/xref/index.html b/dependency-check-core/xref/index.html
index 91c819858..223cf4279 100644
--- a/dependency-check-core/xref/index.html
+++ b/dependency-check-core/xref/index.html
@@ -4,7 +4,7 @@
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
diff --git a/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html b/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html
index beba5b35f..3740c0487 100644
--- a/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html
+++ b/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html
@@ -26,98 +26,143 @@
18 package org.owasp.dependencycheck.analyzer;
19
20 import java.io.File;
-21 import java.util.List;
-22 import java.util.Set;
-23 import java.util.logging.Level;
-24 import java.util.logging.Logger;
-25 import org.owasp.dependencycheck.suppression.SuppressionParseException;
-26 import org.owasp.dependencycheck.suppression.SuppressionParser;
-27 import org.owasp.dependencycheck.suppression.SuppressionRule;
-28 import org.owasp.dependencycheck.utils.Settings;
-29
-30
-31
-32
-33
-34
-35 public abstract class AbstractSuppressionAnalyzer extends AbstractAnalyzer {
+21 import java.io.IOException;
+22 import java.net.MalformedURLException;
+23 import java.net.URL;
+24 import java.util.List;
+25 import java.util.Set;
+26 import java.util.logging.Level;
+27 import java.util.logging.Logger;
+28 import java.util.regex.Pattern;
+29 import org.owasp.dependencycheck.suppression.SuppressionParseException;
+30 import org.owasp.dependencycheck.suppression.SuppressionParser;
+31 import org.owasp.dependencycheck.suppression.SuppressionRule;
+32 import org.owasp.dependencycheck.utils.DownloadFailedException;
+33 import org.owasp.dependencycheck.utils.Downloader;
+34 import org.owasp.dependencycheck.utils.FileUtils;
+35 import org.owasp.dependencycheck.utils.Settings;
36
-37
-38
-39
-40
-41
-42
-43 public Set<String> getSupportedExtensions() {
-44 return null ;
-45 }
-46
-47
-48
-49
-50
-51
-52
-53 @Override
-54 public boolean supportsExtension(String extension) {
-55 return true ;
-56 }
-57
-58
-59
-60
-61
-62
-63
-64 @Override
-65 public void initialize() throws Exception {
-66 super .initialize();
-67 loadSuppressionData();
-68 }
-69
-70
-71
-72 private List<SuppressionRule> rules;
-73
-74
-75
-76
-77
+37
+38
+39
+40
+41
+42 public abstract class AbstractSuppressionAnalyzer extends AbstractAnalyzer {
+43
+44
+45
+46
+47
+48
+49
+50 public Set<String> getSupportedExtensions() {
+51 return null ;
+52 }
+53
+54
+55
+56
+57
+58
+59
+60 @Override
+61 public boolean supportsExtension(String extension) {
+62 return true ;
+63 }
+64
+65
+66
+67
+68
+69
+70
+71 @Override
+72 public void initialize() throws Exception {
+73 super .initialize();
+74 loadSuppressionData();
+75 }
+76
+77
78
-79 public List<SuppressionRule> getRules() {
-80 return rules;
-81 }
-82
-83
-84
-85
-86
-87
-88 public void setRules(List<SuppressionRule> rules) {
-89 this .rules = rules;
-90 }
-91
-92
-93
-94
-95
-96
-97 private void loadSuppressionData() throws SuppressionParseException {
-98 final File file = Settings.getFile(Settings.KEYS.SUPPRESSION_FILE);
-99 if (file != null ) {
-100 final SuppressionParser parser = new SuppressionParser ();
-101 try {
-102 rules = parser.parseSuppressionRules(file);
-103 } catch (SuppressionParseException ex) {
-104 final String msg = String.format("Unable to parse suppression xml file '%s'" , file.getPath());
-105 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING, msg);
-106 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING, ex.getMessage());
-107 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.FINE, null , ex);
-108 throw ex;
-109 }
-110 }
-111 }
-112 }
+79 private List<SuppressionRule> rules;
+80
+81
+82
+83
+84
+85
+86 public List<SuppressionRule> getRules() {
+87 return rules;
+88 }
+89
+90
+91
+92
+93
+94
+95 public void setRules(List<SuppressionRule> rules) {
+96 this .rules = rules;
+97 }
+98
+99
+100
+101
+102
+103
+104 private void loadSuppressionData() throws SuppressionParseException {
+105 final String suppressionFilePath = Settings.getString(Settings.KEYS.SUPPRESSION_FILE);
+106 if (suppressionFilePath == null ) {
+107 return ;
+108 }
+109 File file = null ;
+110 boolean deleteTempFile = false;
+111 try {
+112 final Pattern uriRx = Pattern.compile("^(https?|file)\\:.*" , Pattern.CASE_INSENSITIVE);
+113 if (uriRx.matcher(suppressionFilePath).matches()) {
+114 deleteTempFile = true ;
+115 file = FileUtils.getTempFile("suppression" , "xml" );
+116 final URL url = new URL(suppressionFilePath);
+117 try {
+118 Downloader.fetchFile(url, file, false);
+119 } catch (DownloadFailedException ex) {
+120 Downloader.fetchFile(url, file, true );
+121 }
+122 }
+123
+124 if (file != null ) {
+125 final SuppressionParser parser = new SuppressionParser ();
+126 try {
+127 rules = parser.parseSuppressionRules(file);
+128 } catch (SuppressionParseException ex) {
+129 final String msg = String.format("Unable to parse suppression xml file '%s'" , file.getPath());
+130 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING, msg);
+131 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING, ex.getMessage());
+132 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.FINE, null , ex);
+133 throw ex;
+134 }
+135 }
+136 } catch (DownloadFailedException ex) {
+137 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING,
+138 "Unable to fetch the configured suppression file" );
+139 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.FINE, "" , ex);
+140 throw new SuppressionParseException ("Unable to fetch the configured suppression file" , ex);
+141 } catch (MalformedURLException ex) {
+142 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING,
+143 "Configured suppression file has an invalid URL" );
+144 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.FINE, "" , ex);
+145 throw new SuppressionParseException ("Configured suppression file has an invalid URL" , ex);
+146 } catch (IOException ex) {
+147 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.WARNING,
+148 "Unable to create temp file for suppressions" );
+149 Logger.getLogger(AbstractSuppressionAnalyzer.class .getName()).log(Level.FINE, "" , ex);
+150 throw new SuppressionParseException ("Unable to create temp file for suppressions" , ex);
+151 } finally {
+152 if (deleteTempFile && file != null ) {
+153 FileUtils.delete(file);
+154 }
+155 }
+156 }
+157 }
158 @Override
159 public void initialize() throws Exception {
160 super .initialize();
-161 final File tempFile = File.createTempFile("GKA" , ".exe" );
+161 final File tempFile = File.createTempFile("GKA" , ".exe" , Settings.getTempDirectory());
162 FileOutputStream fos = null ;
163 InputStream is = null ;
164 try {
diff --git a/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/exception/package-frame.html b/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/exception/package-frame.html
index f8d941a44..e76b18fd5 100644
--- a/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/exception/package-frame.html
+++ b/dependency-check-core/xref/org/owasp/dependencycheck/analyzer/exception/package-frame.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.analyzer.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.analyzer.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.analyzer.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.analyzer.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nexus
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nexus
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nexus
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nexus
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nuget
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nuget
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nuget
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nuget
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update
29 import org.owasp.dependencycheck.data.update.NvdCveInfo;
30 import org.owasp.dependencycheck.utils.DownloadFailedException;
31 import org.owasp.dependencycheck.utils.Downloader;
-32
-33
-34
-35
-36
-37
-38 public class CallableDownloadTask implements Callable<Future<ProcessTask>> {
-39
-40
-41
-42
-43
-44
-45
-46
-47 public CallableDownloadTask (NvdCveInfo nvdCveInfo, ExecutorService processor, CveDB cveDB) {
-48 this .nvdCveInfo = nvdCveInfo;
-49 this .processorService = processor;
-50 this .cveDB = cveDB;
-51
-52 final File file1;
-53 final File file2;
-54
-55 try {
-56 file1 = File.createTempFile("cve" + nvdCveInfo.getId() + "_" , ".xml" );
-57 file2 = File.createTempFile("cve_1_2_" + nvdCveInfo.getId() + "_" , ".xml" );
-58 } catch (IOException ex) {
-59 return ;
-60 }
-61 this .first = file1;
-62 this .second = file2;
-63
-64 }
-65
-66
-67
-68 private CveDB cveDB;
-69
-70
-71
-72 private ExecutorService processorService;
-73
-74
-75
-76 private NvdCveInfo nvdCveInfo;
-77
-78
-79
-80
-81
-82
-83 public NvdCveInfo getNvdCveInfo() {
-84 return nvdCveInfo;
-85 }
-86
-87
-88
-89
-90
-91
-92 public void setNvdCveInfo(NvdCveInfo nvdCveInfo) {
-93 this .nvdCveInfo = nvdCveInfo;
-94 }
-95
-96
-97
-98 private File first;
-99
-100
-101
-102
-103
-104
-105 public File getFirst() {
-106 return first;
-107 }
-108
-109
-110
-111
-112
-113
-114 public void setFirst(File first) {
-115 this .first = first;
-116 }
-117
-118
-119
-120 private File second;
-121
-122
-123
-124
-125
-126
-127 public File getSecond() {
-128 return second;
-129 }
-130
-131
-132
-133
-134
-135
-136 public void setSecond(File second) {
-137 this .second = second;
-138 }
-139
-140
-141
-142 private Exception exception = null ;
-143
-144
-145
-146
-147
-148
-149 public Exception getException() {
-150 return exception;
-151 }
-152
-153
-154
-155
-156
-157
-158 public boolean hasException() {
-159 return exception != null ;
-160 }
-161
-162 @Override
-163 public Future<ProcessTask> call() throws Exception {
-164 try {
-165 final URL url1 = new URL(nvdCveInfo.getUrl());
-166 final URL url2 = new URL(nvdCveInfo.getOldSchemaVersionUrl());
-167 String msg = String.format("Download Started for NVD CVE - %s" , nvdCveInfo.getId());
-168 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.INFO, msg);
-169 try {
-170 Downloader.fetchFile(url1, first);
-171 Downloader.fetchFile(url2, second);
-172 } catch (DownloadFailedException ex) {
-173 msg = String.format("Download Failed for NVD CVE - %s%nSome CVEs may not be reported." , nvdCveInfo.getId());
-174 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.WARNING, msg);
-175 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.FINE, null , ex);
-176 return null ;
-177 }
-178
-179 msg = String.format("Download Complete for NVD CVE - %s" , nvdCveInfo.getId());
-180 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.INFO, msg);
-181
-182 final ProcessTask task = new ProcessTask (cveDB, this );
-183 return this .processorService.submit(task);
-184
-185 } catch (Throwable ex) {
-186 final String msg = String.format("An exception occurred downloading NVD CVE - %s%nSome CVEs may not be reported." , nvdCveInfo.getId());
-187 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.WARNING, msg);
-188 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.FINE, "Download Task Failed" , ex);
-189 }
-190 return null ;
-191 }
-192
-193
-194
-195
-196 public void cleanup() {
-197 boolean deleted = false;
-198 try {
-199 if (first != null && first.exists()) {
-200 deleted = first.delete();
-201 }
-202 } finally {
-203 if (first != null && (first.exists() || !deleted)) {
-204 first.deleteOnExit();
-205 }
-206 }
-207 try {
-208 deleted = false;
-209 if (second != null && second.exists()) {
-210 deleted = second.delete();
-211 }
-212 } finally {
-213 if (second != null && (second.exists() || !deleted)) {
-214 second.deleteOnExit();
-215 }
-216 }
-217 }
-218 }
+32 import org.owasp.dependencycheck.utils.Settings;
+33
+34
+35
+36
+37
+38
+39 public class CallableDownloadTask implements Callable<Future<ProcessTask>> {
+40
+41
+42
+43
+44
+45
+46
+47
+48 public CallableDownloadTask (NvdCveInfo nvdCveInfo, ExecutorService processor, CveDB cveDB) {
+49 this .nvdCveInfo = nvdCveInfo;
+50 this .processorService = processor;
+51 this .cveDB = cveDB;
+52
+53 final File file1;
+54 final File file2;
+55
+56 try {
+57 file1 = File.createTempFile("cve" + nvdCveInfo.getId() + "_" , ".xml" , Settings.getTempDirectory());
+58 file2 = File.createTempFile("cve_1_2_" + nvdCveInfo.getId() + "_" , ".xml" , Settings.getTempDirectory());
+59 } catch (IOException ex) {
+60 return ;
+61 }
+62 this .first = file1;
+63 this .second = file2;
+64
+65 }
+66
+67
+68
+69 private CveDB cveDB;
+70
+71
+72
+73 private ExecutorService processorService;
+74
+75
+76
+77 private NvdCveInfo nvdCveInfo;
+78
+79
+80
+81
+82
+83
+84 public NvdCveInfo getNvdCveInfo() {
+85 return nvdCveInfo;
+86 }
+87
+88
+89
+90
+91
+92
+93 public void setNvdCveInfo(NvdCveInfo nvdCveInfo) {
+94 this .nvdCveInfo = nvdCveInfo;
+95 }
+96
+97
+98
+99 private File first;
+100
+101
+102
+103
+104
+105
+106 public File getFirst() {
+107 return first;
+108 }
+109
+110
+111
+112
+113
+114
+115 public void setFirst(File first) {
+116 this .first = first;
+117 }
+118
+119
+120
+121 private File second;
+122
+123
+124
+125
+126
+127
+128 public File getSecond() {
+129 return second;
+130 }
+131
+132
+133
+134
+135
+136
+137 public void setSecond(File second) {
+138 this .second = second;
+139 }
+140
+141
+142
+143 private Exception exception = null ;
+144
+145
+146
+147
+148
+149
+150 public Exception getException() {
+151 return exception;
+152 }
+153
+154
+155
+156
+157
+158
+159 public boolean hasException() {
+160 return exception != null ;
+161 }
+162
+163 @Override
+164 public Future<ProcessTask> call() throws Exception {
+165 try {
+166 final URL url1 = new URL(nvdCveInfo.getUrl());
+167 final URL url2 = new URL(nvdCveInfo.getOldSchemaVersionUrl());
+168 String msg = String.format("Download Started for NVD CVE - %s" , nvdCveInfo.getId());
+169 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.INFO, msg);
+170 try {
+171 Downloader.fetchFile(url1, first);
+172 Downloader.fetchFile(url2, second);
+173 } catch (DownloadFailedException ex) {
+174 msg = String.format("Download Failed for NVD CVE - %s%nSome CVEs may not be reported." , nvdCveInfo.getId());
+175 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.WARNING, msg);
+176 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.FINE, null , ex);
+177 return null ;
+178 }
+179
+180 msg = String.format("Download Complete for NVD CVE - %s" , nvdCveInfo.getId());
+181 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.INFO, msg);
+182
+183 final ProcessTask task = new ProcessTask (cveDB, this );
+184 return this .processorService.submit(task);
+185
+186 } catch (Throwable ex) {
+187 final String msg = String.format("An exception occurred downloading NVD CVE - %s%nSome CVEs may not be reported." , nvdCveInfo.getId());
+188 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.WARNING, msg);
+189 Logger.getLogger(CallableDownloadTask.class .getName()).log(Level.FINE, "Download Task Failed" , ex);
+190 }
+191 return null ;
+192 }
+193
+194
+195
+196
+197 public void cleanup() {
+198 boolean deleted = false;
+199 try {
+200 if (first != null && first.exists()) {
+201 deleted = first.delete();
+202 }
+203 } finally {
+204 if (first != null && (first.exists() || !deleted)) {
+205 first.deleteOnExit();
+206 }
+207 }
+208 try {
+209 deleted = false;
+210 if (second != null && second.exists()) {
+211 deleted = second.delete();
+212 }
+213 } finally {
+214 if (second != null && (second.exists() || !deleted)) {
+215 second.deleteOnExit();
+216 }
+217 }
+218 }
+219 }
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.task
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.task
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.task
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.task
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.xml
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.xml
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.data.update.xml
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.data.update.xml
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.exception
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.exception
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.jaxb.pom
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.jaxb.pom
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.jaxb.pom
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.jaxb.pom
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.suppression
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.suppression
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.suppression
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.suppression
46
47
48
-49
-50
-51
+49
+50
+51
52
53 public static void fetchFile(URL url, File outputPath) throws DownloadFailedException {
-54 HttpURLConnection conn = null ;
-55 try {
-56 conn = URLConnectionFactory.createHttpURLConnection(url);
-57 conn.setRequestProperty("Accept-Encoding" , "gzip, deflate" );
-58 conn.connect();
-59 } catch (IOException ex) {
-60 try {
-61 if (conn != null ) {
-62 conn.disconnect();
-63 }
-64 } finally {
-65 conn = null ;
-66 }
-67 throw new DownloadFailedException ("Error downloading file." , ex);
-68 }
-69 final String encoding = conn.getContentEncoding();
-70
-71 BufferedOutputStream writer = null ;
-72 InputStream reader = null ;
-73 try {
-74 if (encoding != null && "gzip" .equalsIgnoreCase(encoding)) {
-75 reader = new GZIPInputStream(conn.getInputStream());
-76 } else if (encoding != null && "deflate" .equalsIgnoreCase(encoding)) {
-77 reader = new InflaterInputStream(conn.getInputStream());
-78 } else {
-79 reader = conn.getInputStream();
-80 }
-81
-82 writer = new BufferedOutputStream(new FileOutputStream(outputPath));
-83 final byte[] buffer = new byte[4096];
-84 int bytesRead;
-85 while ((bytesRead = reader.read(buffer)) > 0) {
-86 writer.write(buffer, 0, bytesRead);
-87 }
-88 } catch (Throwable ex) {
-89 throw new DownloadFailedException ("Error saving downloaded file." , ex);
-90 } finally {
-91 if (writer != null ) {
+54 fetchFile(url, outputPath, true );
+55 }
+56
+57
+58
+59
+60
+61
+62
+63
+64
+65 public static void fetchFile(URL url, File outputPath, boolean useProxy) throws DownloadFailedException {
+66 if ("file" .equalsIgnoreCase(url.getProtocol())) {
+67 File file;
+68 try {
+69 file = new File(url.toURI());
+70 } catch (URISyntaxException ex) {
+71 final String msg = String.format("Download failed, unable to locate '%s'" , url.toString());
+72 throw new DownloadFailedException (msg);
+73 }
+74 if (file.exists()) {
+75 try {
+76 org.apache.commons.io.FileUtils.copyFile(file, outputPath);
+77 } catch (IOException ex) {
+78 final String msg = String.format("Download failed, unable to copy '%s'" , url.toString());
+79 throw new DownloadFailedException (msg);
+80 }
+81 } else {
+82 final String msg = String.format("Download failed, file does not exist '%s'" , url.toString());
+83 throw new DownloadFailedException (msg);
+84 }
+85 } else {
+86 HttpURLConnection conn = null ;
+87 try {
+88 conn = URLConnectionFactory.createHttpURLConnection(url, useProxy);
+89 conn.setRequestProperty("Accept-Encoding" , "gzip, deflate" );
+90 conn.connect();
+91 } catch (IOException ex) {
92 try {
-93 writer.close();
-94 } catch (Throwable ex) {
-95 Logger.getLogger(Downloader.class .getName()).log(Level.FINEST,
-96 "Error closing the writer in Downloader." , ex);
-97 }
-98 }
-99 if (reader != null ) {
-100 try {
-101 reader.close();
-102 } catch (Throwable ex) {
-103 Logger.getLogger(Downloader.class .getName()).log(Level.FINEST,
-104 "Error closing the reader in Downloader." , ex);
-105 }
-106 }
-107 try {
-108 conn.disconnect();
-109 } finally {
-110 conn = null ;
-111 }
-112 }
-113 }
-114
-115
-116
-117
-118
-119
-120
-121
-122
-123 public static long getLastModified(URL url) throws DownloadFailedException {
-124 long timestamp = 0;
-125
-126 if ("file" .equalsIgnoreCase(url.getProtocol())) {
-127 File lastModifiedFile;
-128 try {
-129
-130
-131
-132
-133
-134
-135
-136
-137 lastModifiedFile = new File(url.toURI());
-138
-139 } catch (URISyntaxException ex) {
-140 final String msg = String.format("Unable to locate '%s'; is the cve.url-2.0.modified property set correctly?" , url.toString());
-141 throw new DownloadFailedException (msg);
-142 }
-143 timestamp = lastModifiedFile.lastModified();
-144 } else {
-145 HttpURLConnection conn = null ;
-146 try {
-147 conn = URLConnectionFactory.createHttpURLConnection(url);
-148 conn.setRequestMethod("HEAD" );
-149 conn.connect();
-150 timestamp = conn.getLastModified();
-151 } catch (URLConnectionFailureException ex) {
-152 throw new DownloadFailedException ("Error creating URL Connection for HTTP HEAD request." , ex);
-153 } catch (IOException ex) {
-154 throw new DownloadFailedException ("Error making HTTP HEAD request." , ex);
-155 } finally {
-156 if (conn != null ) {
-157 try {
-158 conn.disconnect();
-159 } finally {
-160 conn = null ;
-161 }
-162 }
-163 }
-164 }
-165 return timestamp;
-166 }
-167 }
+93 if (conn != null ) {
+94 conn.disconnect();
+95 }
+96 } finally {
+97 conn = null ;
+98 }
+99 throw new DownloadFailedException ("Error downloading file." , ex);
+100 }
+101 final String encoding = conn.getContentEncoding();
+102
+103 BufferedOutputStream writer = null ;
+104 InputStream reader = null ;
+105 try {
+106 if (encoding != null && "gzip" .equalsIgnoreCase(encoding)) {
+107 reader = new GZIPInputStream(conn.getInputStream());
+108 } else if (encoding != null && "deflate" .equalsIgnoreCase(encoding)) {
+109 reader = new InflaterInputStream(conn.getInputStream());
+110 } else {
+111 reader = conn.getInputStream();
+112 }
+113
+114 writer = new BufferedOutputStream(new FileOutputStream(outputPath));
+115 final byte[] buffer = new byte[4096];
+116 int bytesRead;
+117 while ((bytesRead = reader.read(buffer)) > 0) {
+118 writer.write(buffer, 0, bytesRead);
+119 }
+120 } catch (Throwable ex) {
+121 throw new DownloadFailedException ("Error saving downloaded file." , ex);
+122 } finally {
+123 if (writer != null ) {
+124 try {
+125 writer.close();
+126 } catch (Throwable ex) {
+127 Logger.getLogger(Downloader.class .getName()).log(Level.FINEST,
+128 "Error closing the writer in Downloader." , ex);
+129 }
+130 }
+131 if (reader != null ) {
+132 try {
+133 reader.close();
+134 } catch (Throwable ex) {
+135 Logger.getLogger(Downloader.class .getName()).log(Level.FINEST,
+136 "Error closing the reader in Downloader." , ex);
+137 }
+138 }
+139 try {
+140 conn.disconnect();
+141 } finally {
+142 conn = null ;
+143 }
+144 }
+145 }
+146 }
+147
+148
+149
+150
+151
+152
+153
+154
+155
+156 public static long getLastModified(URL url) throws DownloadFailedException {
+157 long timestamp = 0;
+158
+159 if ("file" .equalsIgnoreCase(url.getProtocol())) {
+160 File lastModifiedFile;
+161 try {
+162 lastModifiedFile = new File(url.toURI());
+163 } catch (URISyntaxException ex) {
+164 final String msg = String.format("Unable to locate '%s'; is the cve.url-2.0.modified property set correctly?" , url.toString());
+165 throw new DownloadFailedException (msg);
+166 }
+167 timestamp = lastModifiedFile.lastModified();
+168 } else {
+169 HttpURLConnection conn = null ;
+170 try {
+171 conn = URLConnectionFactory.createHttpURLConnection(url);
+172 conn.setRequestMethod("HEAD" );
+173 conn.connect();
+174 timestamp = conn.getLastModified();
+175 } catch (URLConnectionFailureException ex) {
+176 throw new DownloadFailedException ("Error creating URL Connection for HTTP HEAD request." , ex);
+177 } catch (IOException ex) {
+178 throw new DownloadFailedException ("Error making HTTP HEAD request." , ex);
+179 } finally {
+180 if (conn != null ) {
+181 try {
+182 conn.disconnect();
+183 } finally {
+184 conn = null ;
+185 }
+186 }
+187 }
+188 }
+189 return timestamp;
+190 }
+191 }
26 import java.io.IOException;
27 import java.io.UnsupportedEncodingException;
28 import java.net.URLDecoder;
-29 import java.util.logging.Level;
-30 import java.util.logging.Logger;
-31 import java.util.zip.ZipEntry;
-32 import java.util.zip.ZipInputStream;
-33 import org.owasp.dependencycheck.Engine;
-34
-35
-36
-37
-38
-39
-40 public final class FileUtils {
-41
-42
-43
-44
-45 private static final int BUFFER_SIZE = 4096;
-46
-47
-48
-49
-50 private FileUtils () {
-51 }
-52
-53
-54
-55
-56
-57
-58
-59 public static String getFileExtension(String fileName) {
-60 String ret = null ;
-61 final int pos = fileName.lastIndexOf("." );
-62 if (pos >= 0) {
-63 ret = fileName.substring(pos + 1, fileName.length()).toLowerCase();
-64 }
-65 return ret;
-66 }
-67
-68
-69
-70
-71
-72
-73
-74 public static boolean delete(File file) {
-75 boolean success = true ;
-76 if (file.isDirectory()) {
-77 for (File f : file.listFiles()) {
-78 success &= delete(f);
-79 }
-80 }
-81 if (!org.apache.commons.io.FileUtils.deleteQuietly(file)) {
-82 success = false;
-83 final String msg = String.format("Failed to delete file: %s" , file.getPath());
-84 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, msg);
-85 }
-86 return success;
-87 }
-88
-89
-90
-91
-92
-93
-94
-95
-96
-97
-98
-99
-100
-101 @java.lang.Deprecated
-102 public static File getDataDirectory(String configuredFilePath, Class clazz) throws IOException {
-103 final File file = new File(configuredFilePath);
-104 if (file.isDirectory() && file.canWrite()) {
-105 return new File(file.getCanonicalPath());
-106 } else {
-107 final File exePath = getPathToJar(clazz);
-108 return new File(exePath, configuredFilePath);
-109 }
-110 }
-111
-112
-113
-114
-115
-116
-117
-118
-119
-120
-121 @java.lang.Deprecated
-122 public static File getPathToJar(Class clazz) throws UnsupportedEncodingException {
-123 final String filePath = clazz.getProtectionDomain().getCodeSource().getLocation().getPath();
-124 final String decodedPath = URLDecoder.decode(filePath, "UTF-8" );
-125 final File jarPath = new File(decodedPath);
-126 return jarPath.getParentFile();
-127 }
-128
-129
-130
-131
-132
-133
-134
-135
-136 public static void extractFiles(File archive, File extractTo) throws ExtractionException {
-137 extractFiles(archive, extractTo, null );
-138 }
-139
-140
-141
-142
-143
-144
-145
-146
-147
-148
-149
-150 public static void extractFiles(File archive, File extractTo, Engine engine) throws ExtractionException {
-151 if (archive == null || extractTo == null ) {
-152 return ;
-153 }
-154
-155 FileInputStream fis = null ;
-156 ZipInputStream zis = null ;
-157
-158 try {
-159 fis = new FileInputStream(archive);
-160 } catch (FileNotFoundException ex) {
-161 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
-162 throw new ExtractionException ("Archive file was not found." , ex);
-163 }
-164 zis = new ZipInputStream(new BufferedInputStream(fis));
-165 ZipEntry entry;
-166 try {
-167 while ((entry = zis.getNextEntry()) != null ) {
-168 if (entry.isDirectory()) {
-169 final File d = new File(extractTo, entry.getName());
-170 if (!d.exists() && !d.mkdirs()) {
-171 final String msg = String.format("Unable to create '%s'." , d.getAbsolutePath());
-172 throw new ExtractionException (msg);
-173 }
-174 } else {
-175 final File file = new File(extractTo, entry.getName());
-176 final String ext = getFileExtension(file.getName());
-177 if (engine == null || engine.supportsExtension(ext)) {
-178 BufferedOutputStream bos = null ;
-179 FileOutputStream fos;
-180 try {
-181 fos = new FileOutputStream(file);
-182 bos = new BufferedOutputStream(fos, BUFFER_SIZE);
-183 int count;
-184 final byte data[] = new byte[BUFFER_SIZE];
-185 while ((count = zis.read(data, 0, BUFFER_SIZE)) != -1) {
-186 bos.write(data, 0, count);
-187 }
-188 bos.flush();
-189 } catch (FileNotFoundException ex) {
-190 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
-191 final String msg = String.format("Unable to find file '%s'." , file.getName());
-192 throw new ExtractionException (msg, ex);
-193 } catch (IOException ex) {
-194 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
-195 final String msg = String.format("IO Exception while parsing file '%s'." , file.getName());
-196 throw new ExtractionException (msg, ex);
-197 } finally {
-198 if (bos != null ) {
-199 try {
-200 bos.close();
-201 } catch (IOException ex) {
-202 Logger.getLogger(FileUtils.class .getName()).log(Level.FINEST, null , ex);
-203 }
-204 }
-205 }
-206 }
-207 }
-208 }
-209 } catch (IOException ex) {
-210 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
-211 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, msg, ex);
-212 throw new ExtractionException (msg, ex);
-213 } finally {
-214 try {
-215 zis.close();
-216 } catch (IOException ex) {
-217 Logger.getLogger(FileUtils.class .getName()).log(Level.FINEST, null , ex);
-218 }
-219 }
-220 }
-221 }
+29 import java.util.UUID;
+30 import java.util.logging.Level;
+31 import java.util.logging.Logger;
+32 import java.util.zip.ZipEntry;
+33 import java.util.zip.ZipInputStream;
+34 import org.owasp.dependencycheck.Engine;
+35
+36
+37
+38
+39
+40
+41 public final class FileUtils {
+42
+43
+44
+45
+46 private static final int BUFFER_SIZE = 4096;
+47
+48
+49
+50
+51 private FileUtils () {
+52 }
+53
+54
+55
+56
+57
+58
+59
+60 public static String getFileExtension(String fileName) {
+61 String ret = null ;
+62 final int pos = fileName.lastIndexOf("." );
+63 if (pos >= 0) {
+64 ret = fileName.substring(pos + 1, fileName.length()).toLowerCase();
+65 }
+66 return ret;
+67 }
+68
+69
+70
+71
+72
+73
+74
+75 public static boolean delete(File file) {
+76 boolean success = true ;
+77 if (file.isDirectory()) {
+78 for (File f : file.listFiles()) {
+79 success &= delete(f);
+80 }
+81 }
+82 if (!org.apache.commons.io.FileUtils.deleteQuietly(file)) {
+83 success = false;
+84 final String msg = String.format("Failed to delete file: %s" , file.getPath());
+85 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, msg);
+86 }
+87 return success;
+88 }
+89
+90
+91
+92
+93
+94
+95
+96
+97 public static File getTempFile(String prefix, String extension) {
+98 final File dir = Settings.getTempDirectory();
+99 if (!dir.exists()) {
+100 dir.mkdirs();
+101 }
+102 final String tempFileName = String.format("%s%s.%s" , prefix, UUID.randomUUID().toString(), extension);
+103 final File tempFile = new File(dir, tempFileName);
+104 if (tempFile.exists()) {
+105 return getTempFile(prefix, extension);
+106 }
+107 return tempFile;
+108 }
+109
+110
+111
+112
+113
+114
+115
+116
+117
+118
+119
+120
+121
+122 @java.lang.Deprecated
+123 public static File getDataDirectory(String configuredFilePath, Class clazz) throws IOException {
+124 final File file = new File(configuredFilePath);
+125 if (file.isDirectory() && file.canWrite()) {
+126 return new File(file.getCanonicalPath());
+127 } else {
+128 final File exePath = getPathToJar(clazz);
+129 return new File(exePath, configuredFilePath);
+130 }
+131 }
+132
+133
+134
+135
+136
+137
+138
+139
+140
+141
+142 @java.lang.Deprecated
+143 public static File getPathToJar(Class clazz) throws UnsupportedEncodingException {
+144 final String filePath = clazz.getProtectionDomain().getCodeSource().getLocation().getPath();
+145 final String decodedPath = URLDecoder.decode(filePath, "UTF-8" );
+146 final File jarPath = new File(decodedPath);
+147 return jarPath.getParentFile();
+148 }
+149
+150
+151
+152
+153
+154
+155
+156
+157 public static void extractFiles(File archive, File extractTo) throws ExtractionException {
+158 extractFiles(archive, extractTo, null );
+159 }
+160
+161
+162
+163
+164
+165
+166
+167
+168
+169
+170
+171 public static void extractFiles(File archive, File extractTo, Engine engine) throws ExtractionException {
+172 if (archive == null || extractTo == null ) {
+173 return ;
+174 }
+175
+176 FileInputStream fis = null ;
+177 ZipInputStream zis = null ;
+178
+179 try {
+180 fis = new FileInputStream(archive);
+181 } catch (FileNotFoundException ex) {
+182 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
+183 throw new ExtractionException ("Archive file was not found." , ex);
+184 }
+185 zis = new ZipInputStream(new BufferedInputStream(fis));
+186 ZipEntry entry;
+187 try {
+188 while ((entry = zis.getNextEntry()) != null ) {
+189 if (entry.isDirectory()) {
+190 final File d = new File(extractTo, entry.getName());
+191 if (!d.exists() && !d.mkdirs()) {
+192 final String msg = String.format("Unable to create '%s'." , d.getAbsolutePath());
+193 throw new ExtractionException (msg);
+194 }
+195 } else {
+196 final File file = new File(extractTo, entry.getName());
+197 final String ext = getFileExtension(file.getName());
+198 if (engine == null || engine.supportsExtension(ext)) {
+199 BufferedOutputStream bos = null ;
+200 FileOutputStream fos;
+201 try {
+202 fos = new FileOutputStream(file);
+203 bos = new BufferedOutputStream(fos, BUFFER_SIZE);
+204 int count;
+205 final byte data[] = new byte[BUFFER_SIZE];
+206 while ((count = zis.read(data, 0, BUFFER_SIZE)) != -1) {
+207 bos.write(data, 0, count);
+208 }
+209 bos.flush();
+210 } catch (FileNotFoundException ex) {
+211 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
+212 final String msg = String.format("Unable to find file '%s'." , file.getName());
+213 throw new ExtractionException (msg, ex);
+214 } catch (IOException ex) {
+215 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, null , ex);
+216 final String msg = String.format("IO Exception while parsing file '%s'." , file.getName());
+217 throw new ExtractionException (msg, ex);
+218 } finally {
+219 if (bos != null ) {
+220 try {
+221 bos.close();
+222 } catch (IOException ex) {
+223 Logger.getLogger(FileUtils.class .getName()).log(Level.FINEST, null , ex);
+224 }
+225 }
+226 }
+227 }
+228 }
+229 }
+230 } catch (IOException ex) {
+231 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
+232 Logger.getLogger(FileUtils.class .getName()).log(Level.FINE, msg, ex);
+233 throw new ExtractionException (msg, ex);
+234 } finally {
+235 try {
+236 zis.close();
+237 } catch (IOException ex) {
+238 Logger.getLogger(FileUtils.class .getName()).log(Level.FINEST, null , ex);
+239 }
+240 }
+241 }
+242 }
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.1.2 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.1.3 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
Dependency-Check Core 1.1.2 Reference
+ Dependency-Check Core 1.1.3 Reference
diff --git a/dependency-check-jenkins/index.html b/dependency-check-jenkins/index.html
index 49372d564..2205c58f4 100644
--- a/dependency-check-jenkins/index.html
+++ b/dependency-check-jenkins/index.html
@@ -1,13 +1,13 @@
dependency-check-jenkins -
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
diff --git a/dependency-check-jenkins/license.html b/dependency-check-jenkins/license.html
index e6e14e636..965bb3cd4 100644
--- a/dependency-check-jenkins/license.html
+++ b/dependency-check-jenkins/license.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project License
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
diff --git a/dependency-check-jenkins/project-info.html b/dependency-check-jenkins/project-info.html
index 7bc4024f6..32e98b983 100644
--- a/dependency-check-jenkins/project-info.html
+++ b/dependency-check-jenkins/project-info.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project Information
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
diff --git a/dependency-check-jenkins/project-summary.html b/dependency-check-jenkins/project-summary.html
index f29e5f25c..d3b0c71d3 100644
--- a/dependency-check-jenkins/project-summary.html
+++ b/dependency-check-jenkins/project-summary.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project Summary
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
@@ -196,7 +196,7 @@
dependency-check-jenkins
Version
-1.1.2
+1.1.3
Type
pom
diff --git a/dependency-check-maven/apidocs/allclasses-frame.html b/dependency-check-maven/apidocs/allclasses-frame.html
index 70c32716c..fec86613b 100644
--- a/dependency-check-maven/apidocs/allclasses-frame.html
+++ b/dependency-check-maven/apidocs/allclasses-frame.html
@@ -2,10 +2,10 @@
-
+
All Classes (Dependency-Check Maven Plugin 1.1.2 API)
-All Classes (Dependency-Check Maven Plugin 1.1.3 API)
+All Classes (Dependency-Check Maven Plugin 1.1.2 API)
-All Classes (Dependency-Check Maven Plugin 1.1.3 API)
+Constant Field Values (Dependency-Check Maven Plugin 1.1.2 API)
-Constant Field Values (Dependency-Check Maven Plugin 1.1.3 API)
+Deprecated List (Dependency-Check Maven Plugin 1.1.2 API)
-Deprecated List (Dependency-Check Maven Plugin 1.1.3 API)
+API Help (Dependency-Check Maven Plugin 1.1.2 API)
-API Help (Dependency-Check Maven Plugin 1.1.3 API)
+Index (Dependency-Check Maven Plugin 1.1.2 API)
-Index (Dependency-Check Maven Plugin 1.1.3 API)
+Dependency-Check Maven Plugin 1.1.2 API
+Dependency-Check Maven Plugin 1.1.3 API
diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
index 8a63f3b1d..3559fa0dc 100644
--- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
+++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
@@ -2,16 +2,16 @@
-
+
HelpMojo (Dependency-Check Maven Plugin 1.1.2 API)
-HelpMojo (Dependency-Check Maven Plugin 1.1.3 API)
+Uses of Class org.owasp.dependencycheck.maven.DependencyCheckMojo (Dependency-Check Maven Plugin 1.1.2 API)
-Uses of Class org.owasp.dependencycheck.maven.DependencyCheckMojo (Dependency-Check Maven Plugin 1.1.3 API)
+Uses of Class org.owasp.dependencycheck.maven.HelpMojo (Dependency-Check Maven Plugin 1.1.2 API)
-Uses of Class org.owasp.dependencycheck.maven.HelpMojo (Dependency-Check Maven Plugin 1.1.3 API)
+org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.2 API)
-org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.3 API)
+org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.2 API)
-org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.3 API)
+org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.1.2 API)
-org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.1.3 API)
+Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.2 API)
-Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.1.3 API)
+Class Hierarchy (Dependency-Check Maven Plugin 1.1.2 API)
-Class Hierarchy (Dependency-Check Maven Plugin 1.1.3 API)
+dependency-check-maven -
dependency-check:check
@@ -55,7 +55,7 @@
-
+
/
@@ -69,9 +69,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
@@ -165,7 +165,7 @@
Full name :
-org.owasp:dependency-check-maven:1.1.2:check
+org.owasp:dependency-check-maven:1.1.3:check
Description :
@@ -323,7 +323,7 @@ Dependency-Check report.Default value is : ${project.reporting.o
- Base Data Mirror URL for CVE 1.2User property is : cveUrl12Base .
+Base Data Mirror URL for CVE 1.2.User property is : cveUrl12Base .
@@ -334,7 +334,7 @@ Dependency-Check report.Default value is : ${project.reporting.o
- Data Mirror URL for CVE 1.2User property is : cveUrl12Modified .
+Data Mirror URL for CVE 1.2.User property is : cveUrl12Modified .
@@ -345,7 +345,7 @@ Dependency-Check report.Default value is : ${project.reporting.o
- Data Mirror URL for CVE 2.0User property is : cveUrl20Base .
+Data Mirror URL for CVE 2.0.User property is : cveUrl20Base .
@@ -356,7 +356,7 @@ Dependency-Check report.Default value is : ${project.reporting.o
- Data Mirror URL for CVE 2.0User property is : cveUrl20Modified .
+Data Mirror URL for CVE 2.0.User property is : cveUrl20Modified .
@@ -423,7 +423,7 @@ Dependency-Check report.Default value is : ${project.reporting.o
- The description of the Dependency-Check report to be displayed in
-the Maven Generated Reports pageDefault value is : A report providing details on any published vulnerabilities within project dependencies. This report is a best effort but may contain false positives and false negatives. .User property is : description .
+the Maven Generated Reports page.Default value is : A report providing details on any published vulnerabilities within project dependencies. This report is a best effort but may contain false positives and false negatives. .User property is : description .
@@ -434,7 +434,7 @@ the Maven Generated Reports pageDefault value is : A report prov
- The path to the verbose logUser property is : logfile .
+The path to the verbose log.User property is : logfile .
@@ -446,7 +446,7 @@ the Maven Generated Reports pageDefault value is : A report prov
- The name of the report to be displayed in the Maven Generated
-Reports pageDefault value is : Dependency-Check .User property is : name .
+Reports page.Default value is : Dependency-Check .User property is : name .
@@ -484,6 +484,17 @@ Reports pageDefault value is : Dependency-Check .Us
+pathToMono String - The path to mono for .NET Assembly analysis on non-windows systems.User property is : pathToMono .
+
+
+
+
proxyPassword String Default value is : Dependency-Check .Us
The Proxy password.User property is : proxyPassword .
-
+
proxyPort Default value is : Dependency-Check .Us
The Proxy Port.User property is : proxyPort .
-
+
proxyUrl Default value is : Dependency-Check .Us
The Proxy URL.User property is : proxyUrl .
-
+
proxyUsername Default value is : Dependency-Check .Us
The Proxy username.User property is : proxyUsername .
-
+
reportName Default value is : Dependency-Check .Us
The name of the site report destination.Default value is : dependency-check-report .User property is : report-name .
-
+
showSummary Default value is : Dependency-Check .Us
Flag indicating whether or not to show a summary in the output.Default value is : true .User property is : showSummary .
-
+
skipProvidedScope Default value is : Dependency-Check .Us
- Skip Analisys for Provided Scope DependenciesDefault value is : false .User property is : skipProvidedScope .
+Skip Analisys for Provided Scope Dependencies.Default value is : false .User property is : skipProvidedScope .
-
+
skipRuntimeScope Default value is : Dependency-Check .Us
- Skip Analisys for Runtime Scope DependenciesDefault value is : false .User property is : skipRuntimeScope .
+Skip Analisys for Runtime Scope Dependencies.Default value is : false .User property is : skipRuntimeScope .
-
+
skipTestScope Default value is : Dependency-Check .Us
- Skip Analisys for Test Scope DependenciesDefault value is : true .User property is : skipTestScope .
+Skip Analisys for Test Scope Dependencies.Default value is : true .User property is : skipTestScope .
-
+
suppressionFile Default value is : Dependency-Check .Us
The Connection Timeout.User property is : suppressionFile .
-
+
zipExtensions cveUrl12Base :
-Base Data Mirror URL for CVE 1.2
+Base Data Mirror URL for CVE 1.2.
@@ -662,7 +673,7 @@ is not recommended that this be turned to false. Default is true.
cveUrl12Modified :
-Data Mirror URL for CVE 1.2
+Data Mirror URL for CVE 1.2.
@@ -674,7 +685,7 @@ is not recommended that this be turned to false. Default is true.
cveUrl20Base :
-Data Mirror URL for CVE 2.0
+Data Mirror URL for CVE 2.0.
@@ -686,7 +697,7 @@ is not recommended that this be turned to false. Default is true.
cveUrl20Modified :
-Data Mirror URL for CVE 2.0
+Data Mirror URL for CVE 2.0.
@@ -759,7 +770,7 @@ is not recommended that this be turned to false. Default is true.
description :
The description of the Dependency-Check report to be displayed in
-the Maven Generated Reports page
+the Maven Generated Reports page.
@@ -819,7 +830,7 @@ plugin unless the externalReport is set to true. Default is HTML.
logFile :
-The path to the verbose log
+The path to the verbose log.
@@ -832,7 +843,7 @@ plugin unless the externalReport is set to true. Default is HTML.
name :
The name of the report to be displayed in the Maven Generated
-Reports page
+Reports page.
@@ -896,6 +907,18 @@ Reports page
Default : ${project.build.directory} pathToMono :
+
+The path to mono for .NET Assembly analysis on non-windows systems.
+
+
+
+Type : java.lang.String Required : No User Property : pathToMono proxyPassword :
The Proxy password.
@@ -989,7 +1012,7 @@ Dependency-Check report.
skipProvidedScope :
-Skip Analisys for Provided Scope Dependencies
+Skip Analisys for Provided Scope Dependencies.
@@ -1003,7 +1026,7 @@ Dependency-Check report.
skipRuntimeScope :
-Skip Analisys for Runtime Scope Dependencies
+Skip Analisys for Runtime Scope Dependencies.
@@ -1017,7 +1040,7 @@ Dependency-Check report.
skipTestScope :
-Skip Analisys for Test Scope Dependencies
+Skip Analisys for Test Scope Dependencies.
diff --git a/dependency-check-maven/checkstyle.html b/dependency-check-maven/checkstyle.html
index 12c2f2ddc..35410e689 100644
--- a/dependency-check-maven/checkstyle.html
+++ b/dependency-check-maven/checkstyle.html
@@ -1,13 +1,13 @@
dependency-check-maven - Checkstyle Results
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
@@ -260,7 +260,7 @@
15
0
0
-18
+ 17
-
File: 15,
- Errors: 18,
+ Errors: 17,
Warnings: 0,
Infos: 0
@@ -83,7 +83,7 @@ under the License.
0
- 18
+ 17
diff --git a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
index 3c6a90659..2f063c1c8 100644
--- a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
+++ b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
@@ -16,7 +16,7 @@
-
+
diff --git a/dependency-check-maven/cobertura/frame-summary.html b/dependency-check-maven/cobertura/frame-summary.html
index 1625fcab9..46555a9b7 100644
--- a/dependency-check-maven/cobertura/frame-summary.html
+++ b/dependency-check-maven/cobertura/frame-summary.html
@@ -16,8 +16,8 @@
-
+
diff --git a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
index 9f1f9158a..9dd59c88c 100644
--- a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
+++ b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
@@ -12,7 +12,7 @@
@@ -204,7 +204,7 @@
94
95
-
+ 96
97
@@ -214,7 +214,7 @@
99
100
-
+ 101
102
@@ -224,7 +224,7 @@
104
105
-
+ 106
107
@@ -253,1388 +253,1412 @@
119
- 120 0 @Parameter(property = "failBuildOnCVSS" , defaultValue = "11" , required = true )
+ 120 0 @SuppressWarnings("CanBeFinal" )
121
- private float failBuildOnCVSS = 11;
+ @Parameter(property = "failBuildOnCVSS" , defaultValue = "11" , required = true ) 122
-
+ private float failBuildOnCVSS = 11; 123
-
+ 124
-
+ 125
- @Parameter(defaultValue = "${project.build.directory}" , required = true )
+ 126
- private File outputDirectory;
+ @Parameter(defaultValue = "${project.build.directory}" , required = true ) 127
-
+ private File outputDirectory; 128
-
+ 129
-
+ 130
+
+ 131
- 131 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 132
- @Parameter(property = "autoupdate" , defaultValue = "true" , required = true )
+ 132 0 @SuppressWarnings("CanBeFinal" )
133
- private boolean autoUpdate = true ;
+ @Parameter(property = "autoupdate" , defaultValue = "true" , required = true ) 134
-
+ private boolean autoUpdate = true ; 135
-
+ 136
-
+ 137
+
+ 138
- 138 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 139
- @Parameter(property = "format" , defaultValue = "HTML" , required = true )
+ 139 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
140
- private String format = "HTML" ;
+ @Parameter(property = "format" , defaultValue = "HTML" , required = true ) 141
-
+ private String format = "HTML" ; 142
-
+ 143
+
+ 144
- 144 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 145
- @Parameter(property = "externalReport" , defaultValue = "false" , required = true )
+ 145 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
146
- private boolean externalReport = false ;
+ @Parameter(property = "externalReport" , defaultValue = "false" , required = true ) 147
-
+ private boolean externalReport = false ; 148
-
+ 149
+
+ 150
- 150 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 151
- @Parameter(property = "proxyUrl" , defaultValue = "" , required = false )
+ 151 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
152
- private String proxyUrl = null ;
+ @Parameter(property = "proxyUrl" , defaultValue = "" , required = false ) 153
-
+ private String proxyUrl = null ; 154
-
+ 155
+
+ 156
- 156 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 157
- @Parameter(property = "proxyPort" , defaultValue = "" , required = false )
+ 157 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
158
- private String proxyPort = null ;
+ @Parameter(property = "proxyPort" , defaultValue = "" , required = false ) 159
-
+ private String proxyPort = null ; 160
-
+ 161
+
+ 162
- 162 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 163
- @Parameter(property = "proxyUsername" , defaultValue = "" , required = false )
+ 163 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
164
- private String proxyUsername = null ;
+ @Parameter(property = "proxyUsername" , defaultValue = "" , required = false ) 165
-
+ private String proxyUsername = null ; 166
-
+ 167
+
+ 168
- 168 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 169
- @Parameter(property = "proxyPassword" , defaultValue = "" , required = false )
+ 169 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
170
- private String proxyPassword = null ;
+ @Parameter(property = "proxyPassword" , defaultValue = "" , required = false ) 171
-
+ private String proxyPassword = null ; 172
-
+ 173
-
- 174 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 175
- @Parameter(property = "connectionTimeout" , defaultValue = "" , required = false )
- 176
- private String connectionTimeout = null ;
- 177
-
- 178
+ 174
+
+ 175 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 176
+ @Parameter(property = "connectionTimeout" , defaultValue = "" , required = false )
+ 177
+ private String connectionTimeout = null ;
+ 178
+
179
+
+ 180
- 180 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 181
- @Parameter(property = "suppressionFile" , defaultValue = "" , required = false )
+ 181 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
182
- private String suppressionFile = null ;
+ @Parameter(property = "suppressionFile" , defaultValue = "" , required = false ) 183
-
+ private String suppressionFile = null ; 184
-
+ 185
+
+ 186
- 186 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 187
- @Parameter(property = "showSummary" , defaultValue = "true" , required = false )
+ 187 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
188
- private boolean showSummary = true ;
+ @Parameter(property = "showSummary" , defaultValue = "true" , required = false ) 189
-
+ private boolean showSummary = true ; 190
-
+ 191
-
- 192 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 193
- @Parameter(property = "nexusAnalyzerEnabled" , defaultValue = "true" , required = false )
- 194
- private boolean nexusAnalyzerEnabled = true ;
- 195
-
- 196
+ 192
+
+ 193 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 194
+ @Parameter(property = "nexusAnalyzerEnabled" , defaultValue = "true" , required = false )
+ 195
+ private boolean nexusAnalyzerEnabled = true ;
+ 196
+
197
-
+ 198
- @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 199
- @Parameter(property = "nexusUrl" , defaultValue = "" , required = false )
+ @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" }) 200
- private String nexusUrl;
+ @Parameter(property = "nexusUrl" , defaultValue = "" , required = false ) 201
-
+ private String nexusUrl; 202
-
+ 203
+
+ 204
- 204 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
- 205
- @Parameter(property = "nexusUsesProxy" , defaultValue = "true" , required = false )
+ 205 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
206
- private boolean nexusUsesProxy = true ;
+ @Parameter(property = "nexusUsesProxy" , defaultValue = "true" , required = false ) 207
-
+ private boolean nexusUsesProxy = true ; 208
-
+ 209
-
+ 210
- @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 211
- @Parameter(property = "connectionString" , defaultValue = "" , required = false )
+ @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" }) 212
- private String connectionString;
+ @Parameter(property = "connectionString" , defaultValue = "" , required = false ) 213
-
+ private String connectionString; 214
-
+ 215
-
+ 216
- @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 217
- @Parameter(property = "databaseDriverName" , defaultValue = "" , required = false )
+ @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" }) 218
- private String databaseDriverName;
+ @Parameter(property = "databaseDriverName" , defaultValue = "" , required = false ) 219
-
+ private String databaseDriverName; 220
-
+ 221
-
+ 222
- @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 223
- @Parameter(property = "databaseDriverPath" , defaultValue = "" , required = false )
+ @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" }) 224
- private String databaseDriverPath;
+ @Parameter(property = "databaseDriverPath" , defaultValue = "" , required = false ) 225
-
+ private String databaseDriverPath; 226
-
+ 227
-
+ 228
- @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 229
- @Parameter(property = "databaseUser" , defaultValue = "" , required = false )
- 230
- private String databaseUser;
- 231
-
- 232
-
- 233
-
- 234
@SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 230
+ @Parameter(property = "databaseUser" , defaultValue = "" , required = false )
+ 231
+ private String databaseUser;
+ 232
+
+ 233
+
+ 234
+
235
- @Parameter(property = "databasePassword" , defaultValue = "" , required = false )
+ @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" }) 236
- private String databasePassword;
+ @Parameter(property = "databasePassword" , defaultValue = "" , required = false ) 237
-
+ private String databasePassword; 238
-
+ 239
-
+ 240
- @Parameter(property = "zipExtensions" , required = false )
+ 241
- private String zipExtensions;
+ @Parameter(property = "zipExtensions" , required = false ) 242
-
+ private String zipExtensions; 243
-
+ 244
+
+ 245
- 245 0 @Parameter(property = "skipTestScope" , defaultValue = "true" , required = false )
- 246
- private boolean skipTestScope = true ;
+ 246 0 @SuppressWarnings("CanBeFinal" )
247
-
+ @Parameter(property = "skipTestScope" , defaultValue = "true" , required = false ) 248
-
+ private boolean skipTestScope = true ; 249
-
- 250 0 @Parameter(property = "skipRuntimeScope" , defaultValue = "false" , required = false )
+ 250
+
251
- private boolean skipRuntimeScope = false ;
- 252
-
+ 252 0 @SuppressWarnings("CanBeFinal" )
253
-
+ @Parameter(property = "skipRuntimeScope" , defaultValue = "false" , required = false ) 254
-
- 255 0 @Parameter(property = "skipProvidedScope" , defaultValue = "false" , required = false )
+ private boolean skipRuntimeScope = false ; 255
+
256
- private boolean skipProvidedScope = false ;
+ 257
-
- 258
-
+ 258 0 @SuppressWarnings("CanBeFinal" )
259
-
+ @Parameter(property = "skipProvidedScope" , defaultValue = "false" , required = false ) 260
- @Parameter(property = "dataDirectory" , defaultValue = "" , required = false )
+ private boolean skipProvidedScope = false ; 261
- private String dataDirectory;
+ 262
-
+ 263
-
+ 264
-
+ @Parameter(property = "dataDirectory" , defaultValue = "" , required = false ) 265
- @Parameter(property = "cveUrl12Modified" , defaultValue = "" , required = false )
+ private String dataDirectory; 266
- private String cveUrl12Modified;
+ 267
-
+ 268
-
+ 269
-
+ @Parameter(property = "cveUrl12Modified" , defaultValue = "" , required = false ) 270
- @Parameter(property = "cveUrl20Modified" , defaultValue = "" , required = false )
+ private String cveUrl12Modified; 271
- private String cveUrl20Modified;
+ 272
-
+ 273
-
+ 274
-
+ @Parameter(property = "cveUrl20Modified" , defaultValue = "" , required = false ) 275
- @Parameter(property = "cveUrl12Base" , defaultValue = "" , required = false )
+ private String cveUrl20Modified; 276
- private String cveUrl12Base;
+ 277
-
+ 278
-
- 279
+ 279
+ @Parameter(property = "cveUrl12Base" , defaultValue = "" , required = false )
280
- @Parameter(property = "cveUrl20Base" , defaultValue = "" , required = false )
+ private String cveUrl12Base; 281
- private String cveUrl20Base;
- 282
-
- 283
-
- 284
+ 282
+
+ 283
+
+ 284
+ @Parameter(property = "cveUrl20Base" , defaultValue = "" , required = false )
285
-
+ private String cveUrl20Base; 286
-
+ 287
-
+ 288
-
+ 289
290
- private Engine executeDependencyCheck() throws DatabaseException {
+ @Parameter(property = "pathToMono" , defaultValue = "" , required = false ) 291
+ private String pathToMono;
+ 292
- 292 0 final InputStream in = DependencyCheckMojo.class .getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
- 293 0 LogUtils.prepareLogger(in, logFile);
+ 293
+
294
-
- 295 0 populateSettings();
- 296 0 Engine engine = null ;
+ 295
+
+ 296
+
297
- try {
- 298 0 engine = new Engine();
- 299 0 final Set<Artifact> artifacts = project.getArtifacts();
- 300 0 for (Artifact a : artifacts) {
- 301 0 if (skipTestScope && Artifact.SCOPE_TEST.equals(a.getScope())) {
- 302 0 continue ;
- 303
- }
+ 298
+
+ 299
+
+ 300
+ private Engine executeDependencyCheck() throws DatabaseException {
+ 301
+
+ 302 0 final InputStream in = DependencyCheckMojo.class .getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
+ 303 0 LogUtils.prepareLogger(in, logFile);
304
- 305 0 if (skipProvidedScope && Artifact.SCOPE_PROVIDED.equals(a.getScope())) {
- 306 0 continue ;
+ 305 0 populateSettings();
+ 306 0 Engine engine = null ;
307
+ try {
+ 308 0 engine = new Engine();
+ 309 0 final Set<Artifact> artifacts = project.getArtifacts();
+ 310 0 for (Artifact a : artifacts) {
+ 311 0 if (skipTestScope && Artifact.SCOPE_TEST.equals(a.getScope())) {
+ 312 0 continue ;
+ 313
}
- 308
+ 314
- 309 0 if (skipRuntimeScope && !Artifact.SCOPE_RUNTIME.equals(a.getScope())) {
- 310 0 continue ;
- 311
+ 315 0 if (skipProvidedScope && Artifact.SCOPE_PROVIDED.equals(a.getScope())) {
+ 316 0 continue ;
+ 317
}
- 312
+ 318
- 313 0 engine.scan(a.getFile().getAbsolutePath());
- 314 0 }
- 315 0 engine.analyzeDependencies();
- 316
- } finally {
- 317 0 if (engine != null ) {
- 318 0 engine.cleanup();
- 319
- }
- 320
- }
- 321 0 return engine;
+ 319 0 if (skipRuntimeScope && !Artifact.SCOPE_RUNTIME.equals(a.getScope())) {
+ 320 0 continue ;
+ 321
+ }
322
- }
- 323
- 324
-
- 325
-
+ 323 0 engine.scan(a.getFile().getAbsolutePath());
+ 324 0 }
+ 325 0 engine.analyzeDependencies();
326
-
- 327
-
- 328
-
- 329
- private void generateExternalReports(Engine engine) {
- 330 0 DatabaseProperties prop = null ;
- 331 0 CveDB cve = null ;
- 332
- try {
- 333 0 cve = new CveDB();
- 334 0 cve.open();
- 335 0 prop = cve.getDatabaseProperties();
- 336 0 } catch (DatabaseException ex) {
- 337 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "Unable to retrieve DB Properties" , ex);
- 338
} finally {
- 339 0 if (cve != null ) {
- 340 0 cve.close();
- 341
+ 327 0 if (engine != null ) {
+ 328 0 engine.cleanup();
+ 329
}
+ 330
+ }
+ 331 0 return engine;
+ 332
+ }
+ 333
+
+ 334
+
+ 335
+
+ 336
+
+ 337
+
+ 338
+
+ 339
+ private void generateExternalReports(Engine engine) {
+ 340 0 DatabaseProperties prop = null ;
+ 341 0 CveDB cve = null ;
342
- }
- 343 0 final ReportGenerator r = new ReportGenerator(project.getName(), engine.getDependencies(), engine.getAnalyzers(), prop);
- 344
try {
- 345 0 r.generateReports(outputDirectory.getCanonicalPath(), format);
- 346 0 } catch (IOException ex) {
- 347 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ 343 0 cve = new CveDB();
+ 344 0 cve.open();
+ 345 0 prop = cve.getDatabaseProperties();
+ 346 0 } catch (DatabaseException ex) {
+ 347 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "Unable to retrieve DB Properties" , ex);
348
- "Unexpected exception occurred during analysis; please see the verbose error log for more details." );
- 349 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
- 350 0 } catch (Throwable ex) {
- 351 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ } finally { 349 0 if (cve != null ) {
+ 350 0 cve.close();
+ 351
+ }
352
- "Unexpected exception occurred during analysis; please see the verbose error log for more details." );
- 353 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
- 354 0 }
- 355 0 }
- 356
-
- 357
-
- 358
-
- 359
-
- 360
-
- 361
-
- 362
-
- 363
- private void generateMavenSiteReport(final Engine engine, Sink sink) {
- 364 0 final List<Dependency> dependencies = engine.getDependencies();
- 365
-
- 366 0 writeSiteReportHeader(sink, project.getName());
- 367 0 writeSiteReportTOC(sink, dependencies);
- 368
-
- 369 0 int cnt = 0;
- 370 0 for (Dependency d : dependencies) {
- 371 0 writeSiteReportDependencyHeader(sink, d);
- 372 0 cnt = writeSiteReportDependencyEvidenceUsed(d, cnt, sink);
- 373 0 cnt = writeSiteReportDependencyRelatedDependencies(d, cnt, sink);
- 374 0 writeSiteReportDependencyIdentifiers(d, sink);
- 375 0 writeSiteReportDependencyVulnerabilities(d, sink, cnt);
- 376 0 }
- 377 0 sink.body_();
- 378 0 }
- 379
-
- 380
-
- 381
-
- 382
-
- 383
-
- 384
-
- 385
-
- 386
-
- 387
-
- 388
- private void writeSiteReportDependencyVulnerabilities(Dependency d, Sink sink, int collapsibleHeaderCount) {
- 389 0 int cnt = collapsibleHeaderCount;
- 390 0 if (d.getVulnerabilities() != null && !d.getVulnerabilities().isEmpty()) {
- 391 0 for (Vulnerability v : d.getVulnerabilities()) {
- 392
-
- 393 0 sink.paragraph();
- 394 0 sink.bold();
- 395
- try {
- 396 0 sink.link("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + URLEncoder.encode(v.getName(), "US-ASCII" ));
- 397 0 sink.text(v.getName());
- 398 0 sink.link_();
- 399 0 sink.bold_();
- 400 0 } catch (UnsupportedEncodingException ex) {
- 401 0 sink.text(v.getName());
- 402 0 sink.bold_();
- 403 0 sink.lineBreak();
- 404 0 sink.text("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + v.getName());
- 405 0 }
- 406 0 sink.paragraph_();
- 407 0 sink.paragraph();
- 408 0 sink.text("Severity: " );
- 409 0 if (v.getCvssScore() < 4.0) {
- 410 0 sink.text("Low" );
- 411
- } else {
- 412 0 if (v.getCvssScore() >= 7.0) {
- 413 0 sink.text("High" );
- 414
- } else {
- 415 0 sink.text("Medium" );
- 416
- }
- 417
- }
- 418 0 sink.lineBreak();
- 419 0 sink.text("CVSS Score: " + v.getCvssScore());
- 420 0 if (v.getCwe() != null && !v.getCwe().isEmpty()) {
- 421 0 sink.lineBreak();
- 422 0 sink.text("CWE: " );
- 423 0 sink.text(v.getCwe());
- 424
- }
- 425 0 sink.paragraph_();
- 426 0 sink.paragraph();
- 427 0 sink.text(v.getDescription());
- 428 0 if (v.getReferences() != null && !v.getReferences().isEmpty()) {
- 429 0 sink.list();
- 430 0 for (Reference ref : v.getReferences()) {
- 431 0 sink.listItem();
- 432 0 sink.text(ref.getSource());
- 433 0 sink.text(" - " );
- 434 0 sink.link(ref.getUrl());
- 435 0 sink.text(ref.getName());
- 436 0 sink.link_();
- 437 0 sink.listItem_();
- 438 0 }
- 439 0 sink.list_();
- 440
- }
- 441 0 sink.paragraph_();
- 442 0 if (v.getVulnerableSoftware() != null && !v.getVulnerableSoftware().isEmpty()) {
- 443 0 sink.paragraph();
- 444
-
- 445 0 cnt += 1;
- 446 0 sink.rawText("Vulnerable Software <a href=\"javascript:toggleElement(this, 'vulnSoft" + cnt + "')\">[-]</a>" );
- 447 0 sink.rawText("<div id=\"vulnSoft" + cnt + "\" style=\"display:block\">" );
- 448 0 sink.list();
- 449 0 for (VulnerableSoftware vs : v.getVulnerableSoftware()) {
- 450 0 sink.listItem();
- 451
- try {
- 452 0 sink.link("http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + URLEncoder.encode(vs.getName(), "US-ASCII" ));
- 453 0 sink.text(vs.getName());
- 454 0 sink.link_();
- 455 0 if (vs.hasPreviousVersion()) {
- 456 0 sink.text(" and all previous versions." );
- 457
- }
- 458 0 } catch (UnsupportedEncodingException ex) {
- 459 0 sink.text(vs.getName());
- 460 0 if (vs.hasPreviousVersion()) {
- 461 0 sink.text(" and all previous versions." );
- 462
- }
- 463 0 sink.text(" (http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + vs.getName() + ")" );
- 464 0 }
- 465
-
- 466 0 sink.listItem_();
- 467 0 }
- 468 0 sink.list_();
- 469 0 sink.rawText("</div>" );
- 470 0 sink.paragraph_();
- 471
- }
- 472 0 }
- 473
}
- 474 0 }
+ 353 0 final ReportGenerator r = new ReportGenerator(project.getName(), engine.getDependencies(), engine.getAnalyzers(), prop);
+ 354
+ try {
+ 355 0 r.generateReports(outputDirectory.getCanonicalPath(), format);
+ 356 0 } catch (IOException ex) {
+ 357 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ 358
+ "Unexpected exception occurred during analysis; please see the verbose error log for more details." );
+ 359 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
+ 360 0 } catch (Throwable ex) {
+ 361 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ 362
+ "Unexpected exception occurred during analysis; please see the verbose error log for more details." );
+ 363 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
+ 364 0 }
+ 365 0 }
+ 366
+
+ 367
+
+ 368
+
+ 369
+
+ 370
+
+ 371
+
+ 372
+
+ 373
+ private void generateMavenSiteReport(final Engine engine, Sink sink) {
+ 374 0 final List<Dependency> dependencies = engine.getDependencies();
+ 375
+
+ 376 0 writeSiteReportHeader(sink, project.getName());
+ 377 0 writeSiteReportTOC(sink, dependencies);
+ 378
+
+ 379 0 int cnt = 0;
+ 380 0 for (Dependency d : dependencies) {
+ 381 0 writeSiteReportDependencyHeader(sink, d);
+ 382 0 cnt = writeSiteReportDependencyEvidenceUsed(d, cnt, sink);
+ 383 0 cnt = writeSiteReportDependencyRelatedDependencies(d, cnt, sink);
+ 384 0 writeSiteReportDependencyIdentifiers(d, sink);
+ 385 0 writeSiteReportDependencyVulnerabilities(d, sink, cnt);
+ 386 0 }
+ 387 0 sink.body_();
+ 388 0 }
+ 389
+
+ 390
+
+ 391
+
+ 392
+
+ 393
+
+ 394
+
+ 395
+
+ 396
+
+ 397
+
+ 398
+ private void writeSiteReportDependencyVulnerabilities(Dependency d, Sink sink, int collapsibleHeaderCount) {
+ 399 0 int cnt = collapsibleHeaderCount;
+ 400 0 if (d.getVulnerabilities() != null && !d.getVulnerabilities().isEmpty()) {
+ 401 0 for (Vulnerability v : d.getVulnerabilities()) {
+ 402
+
+ 403 0 sink.paragraph();
+ 404 0 sink.bold();
+ 405
+ try {
+ 406 0 sink.link("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + URLEncoder.encode(v.getName(), "US-ASCII" ));
+ 407 0 sink.text(v.getName());
+ 408 0 sink.link_();
+ 409 0 sink.bold_();
+ 410 0 } catch (UnsupportedEncodingException ex) {
+ 411 0 sink.text(v.getName());
+ 412 0 sink.bold_();
+ 413 0 sink.lineBreak();
+ 414 0 sink.text("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + v.getName());
+ 415 0 }
+ 416 0 sink.paragraph_();
+ 417 0 sink.paragraph();
+ 418 0 sink.text("Severity: " );
+ 419 0 if (v.getCvssScore() < 4.0) {
+ 420 0 sink.text("Low" );
+ 421
+ } else {
+ 422 0 if (v.getCvssScore() >= 7.0) {
+ 423 0 sink.text("High" );
+ 424
+ } else {
+ 425 0 sink.text("Medium" );
+ 426
+ }
+ 427
+ }
+ 428 0 sink.lineBreak();
+ 429 0 sink.text("CVSS Score: " + v.getCvssScore());
+ 430 0 if (v.getCwe() != null && !v.getCwe().isEmpty()) {
+ 431 0 sink.lineBreak();
+ 432 0 sink.text("CWE: " );
+ 433 0 sink.text(v.getCwe());
+ 434
+ }
+ 435 0 sink.paragraph_();
+ 436 0 sink.paragraph();
+ 437 0 sink.text(v.getDescription());
+ 438 0 if (v.getReferences() != null && !v.getReferences().isEmpty()) {
+ 439 0 sink.list();
+ 440 0 for (Reference ref : v.getReferences()) {
+ 441 0 sink.listItem();
+ 442 0 sink.text(ref.getSource());
+ 443 0 sink.text(" - " );
+ 444 0 sink.link(ref.getUrl());
+ 445 0 sink.text(ref.getName());
+ 446 0 sink.link_();
+ 447 0 sink.listItem_();
+ 448 0 }
+ 449 0 sink.list_();
+ 450
+ }
+ 451 0 sink.paragraph_();
+ 452 0 if (v.getVulnerableSoftware() != null && !v.getVulnerableSoftware().isEmpty()) {
+ 453 0 sink.paragraph();
+ 454
+
+ 455 0 cnt += 1;
+ 456 0 sink.rawText("Vulnerable Software <a href=\"javascript:toggleElement(this, 'vulnSoft" + cnt + "')\">[-]</a>" );
+ 457 0 sink.rawText("<div id=\"vulnSoft" + cnt + "\" style=\"display:block\">" );
+ 458 0 sink.list();
+ 459 0 for (VulnerableSoftware vs : v.getVulnerableSoftware()) {
+ 460 0 sink.listItem();
+ 461
+ try {
+ 462 0 sink.link("http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + URLEncoder.encode(vs.getName(), "US-ASCII" ));
+ 463 0 sink.text(vs.getName());
+ 464 0 sink.link_();
+ 465 0 if (vs.hasPreviousVersion()) {
+ 466 0 sink.text(" and all previous versions." );
+ 467
+ }
+ 468 0 } catch (UnsupportedEncodingException ex) {
+ 469 0 sink.text(vs.getName());
+ 470 0 if (vs.hasPreviousVersion()) {
+ 471 0 sink.text(" and all previous versions." );
+ 472
+ }
+ 473 0 sink.text(" (http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + vs.getName() + ")" );
+ 474 0 }
475
- 476
-
- 477
-
- 478
-
- 479
-
- 480
-
+ 476 0 sink.listItem_();
+ 477 0 }
+ 478 0 sink.list_();
+ 479 0 sink.rawText("</div>" );
+ 480 0 sink.paragraph_();
481
+ }
+ 482 0 }
+ 483
+ }
+ 484 0 }
+ 485
+
+ 486
+
+ 487
+
+ 488
+
+ 489
+
+ 490
+
+ 491
- 482
+ 492
private void writeSiteReportDependencyIdentifiers(Dependency d, Sink sink) {
- 483 0 if (d.getIdentifiers() != null && !d.getIdentifiers().isEmpty()) {
- 484 0 sink.sectionTitle4();
- 485 0 sink.text("Identifiers" );
- 486 0 sink.sectionTitle4_();
- 487 0 sink.list();
- 488 0 for (Identifier i : d.getIdentifiers()) {
- 489 0 sink.listItem();
- 490 0 sink.text(i.getType());
- 491 0 sink.text(": " );
- 492 0 if (i.getUrl() != null && i.getUrl().length() > 0) {
- 493 0 sink.link(i.getUrl());
- 494 0 sink.text(i.getValue());
- 495 0 sink.link_();
- 496
- } else {
- 497 0 sink.text(i.getValue());
- 498
- }
- 499 0 if (i.getDescription() != null && i.getDescription().length() > 0) {
- 500 0 sink.lineBreak();
- 501 0 sink.text(i.getDescription());
- 502
- }
- 503 0 sink.listItem_();
- 504 0 }
- 505 0 sink.list_();
+ 493 0 if (d.getIdentifiers() != null && !d.getIdentifiers().isEmpty()) {
+ 494 0 sink.sectionTitle4();
+ 495 0 sink.text("Identifiers" );
+ 496 0 sink.sectionTitle4_();
+ 497 0 sink.list();
+ 498 0 for (Identifier i : d.getIdentifiers()) {
+ 499 0 sink.listItem();
+ 500 0 sink.text(i.getType());
+ 501 0 sink.text(": " );
+ 502 0 if (i.getUrl() != null && i.getUrl().length() > 0) {
+ 503 0 sink.link(i.getUrl());
+ 504 0 sink.text(i.getValue());
+ 505 0 sink.link_();
506
- }
- 507 0 }
+ } else { 507 0 sink.text(i.getValue());
508
-
- 509
-
- 510
-
- 511
-
+ } 509 0 if (i.getDescription() != null && i.getDescription().length() > 0) {
+ 510 0 sink.lineBreak();
+ 511 0 sink.text(i.getDescription());
512
-
- 513
-
- 514
-
- 515
-
+ } 513 0 sink.listItem_();
+ 514 0 }
+ 515 0 sink.list_();
516
-
- 517
- private int writeSiteReportDependencyRelatedDependencies(Dependency d, int collapsibleHeaderCount, Sink sink) {
- 518 0 int cnt = collapsibleHeaderCount;
- 519 0 if (d.getRelatedDependencies() != null && !d.getRelatedDependencies().isEmpty()) {
- 520 0 cnt += 1;
- 521 0 sink.sectionTitle4();
- 522 0 sink.rawText("Related Dependencies <a href=\"javascript:toggleElement(this, 'related" + cnt + "')\">[+]</a>" );
- 523 0 sink.sectionTitle4_();
- 524 0 sink.rawText("<div id=\"related" + cnt + "\" style=\"display:none\">" );
- 525 0 sink.list();
- 526 0 for (Dependency r : d.getRelatedDependencies()) {
- 527 0 sink.listItem();
- 528 0 sink.text(r.getFileName());
- 529 0 sink.list();
- 530 0 writeListItem(sink, "File Path: " + r.getFilePath());
- 531 0 writeListItem(sink, "SHA1: " + r.getSha1sum());
- 532 0 writeListItem(sink, "MD5: " + r.getMd5sum());
- 533 0 sink.list_();
- 534 0 sink.listItem_();
- 535 0 }
- 536 0 sink.list_();
- 537 0 sink.rawText("</div>" );
- 538
}
- 539 0 return cnt;
- 540
- }
- 541
+ 517 0 }
+ 518
- 542
+ 519
- 543
-
- 544
+ 520
+
+ 521
- 545
+ 522
- 546
+ 523
- 547
+ 524
- 548
+ 525
- 549
+ 526
+ 527
+ private int writeSiteReportDependencyRelatedDependencies(Dependency d, int collapsibleHeaderCount, Sink sink) {
+ 528 0 int cnt = collapsibleHeaderCount;
+ 529 0 if (d.getRelatedDependencies() != null && !d.getRelatedDependencies().isEmpty()) {
+ 530 0 cnt += 1;
+ 531 0 sink.sectionTitle4();
+ 532 0 sink.rawText("Related Dependencies <a href=\"javascript:toggleElement(this, 'related" + cnt + "')\">[+]</a>" );
+ 533 0 sink.sectionTitle4_();
+ 534 0 sink.rawText("<div id=\"related" + cnt + "\" style=\"display:none\">" );
+ 535 0 sink.list();
+ 536 0 for (Dependency r : d.getRelatedDependencies()) {
+ 537 0 sink.listItem();
+ 538 0 sink.text(r.getFileName());
+ 539 0 sink.list();
+ 540 0 writeListItem(sink, "File Path: " + r.getFilePath());
+ 541 0 writeListItem(sink, "SHA1: " + r.getSha1sum());
+ 542 0 writeListItem(sink, "MD5: " + r.getMd5sum());
+ 543 0 sink.list_();
+ 544 0 sink.listItem_();
+ 545 0 }
+ 546 0 sink.list_();
+ 547 0 sink.rawText("</div>" );
+ 548
+ }
+ 549 0 return cnt;
550
- private int writeSiteReportDependencyEvidenceUsed(Dependency d, int collapsibleHeaderCount, Sink sink) {
- 551 0 int cnt = collapsibleHeaderCount;
- 552 0 if (d.getEvidenceUsed() != null && d.getEvidenceUsed().size() > 0) {
- 553 0 cnt += 1;
- 554 0 sink.sectionTitle4();
- 555 0 sink.rawText("Evidence Collected <a href=\"javascript:toggleElement(this, 'evidence" + cnt + "')\">[+]</a>" );
- 556 0 sink.sectionTitle4_();
- 557 0 sink.rawText("<div id=\"evidence" + cnt + "\" style=\"display:none\">" );
- 558 0 sink.table();
- 559 0 sink.tableRow();
- 560 0 writeTableHeaderCell(sink, "Source" );
- 561 0 writeTableHeaderCell(sink, "Name" );
- 562 0 writeTableHeaderCell(sink, "Value" );
- 563 0 sink.tableRow_();
- 564 0 for (Evidence e : d.getEvidenceUsed()) {
- 565 0 sink.tableRow();
- 566 0 writeTableCell(sink, e.getSource());
- 567 0 writeTableCell(sink, e.getName());
- 568 0 writeTableCell(sink, e.getValue());
- 569 0 sink.tableRow_();
- 570 0 }
- 571 0 sink.table_();
- 572 0 sink.rawText("</div>" );
- 573
- }
- 574 0 return cnt;
- 575
}
- 576
+ 551
- 577
+ 552
- 578
-
- 579
+ 553
+
+ 554
- 580
+ 555
- 581
+ 556
- 582
+ 557
+
+ 558
+
+ 559
+ 560
+ private int writeSiteReportDependencyEvidenceUsed(Dependency d, int collapsibleHeaderCount, Sink sink) {
+ 561 0 int cnt = collapsibleHeaderCount;
+ 562 0 if (d.getEvidenceUsed() != null && d.getEvidenceUsed().size() > 0) {
+ 563 0 cnt += 1;
+ 564 0 sink.sectionTitle4();
+ 565 0 sink.rawText("Evidence Collected <a href=\"javascript:toggleElement(this, 'evidence" + cnt + "')\">[+]</a>" );
+ 566 0 sink.sectionTitle4_();
+ 567 0 sink.rawText("<div id=\"evidence" + cnt + "\" style=\"display:none\">" );
+ 568 0 sink.table();
+ 569 0 sink.tableRow();
+ 570 0 writeTableHeaderCell(sink, "Source" );
+ 571 0 writeTableHeaderCell(sink, "Name" );
+ 572 0 writeTableHeaderCell(sink, "Value" );
+ 573 0 sink.tableRow_();
+ 574 0 for (Evidence e : d.getEvidenceUsed()) {
+ 575 0 sink.tableRow();
+ 576 0 writeTableCell(sink, e.getSource());
+ 577 0 writeTableCell(sink, e.getName());
+ 578 0 writeTableCell(sink, e.getValue());
+ 579 0 sink.tableRow_();
+ 580 0 }
+ 581 0 sink.table_();
+ 582 0 sink.rawText("</div>" );
583
+ }
+ 584 0 return cnt;
+ 585
+ }
+ 586
+
+ 587
+
+ 588
+
+ 589
+
+ 590
+
+ 591
+
+ 592
+
+ 593
private void writeSiteReportDependencyHeader(Sink sink, Dependency d) {
- 584 0 sink.sectionTitle2();
- 585 0 sink.anchor("sha1" + d.getSha1sum());
- 586 0 sink.text(d.getFileName());
- 587 0 sink.anchor_();
- 588 0 sink.sectionTitle2_();
- 589 0 if (d.getDescription() != null && d.getDescription().length() > 0) {
- 590 0 sink.paragraph();
- 591 0 sink.bold();
- 592 0 sink.text("Description: " );
- 593 0 sink.bold_();
- 594 0 sink.text(d.getDescription());
- 595 0 sink.paragraph_();
- 596
- }
- 597 0 if (d.getLicense() != null && d.getLicense().length() > 0) {
- 598 0 sink.paragraph();
- 599 0 sink.bold();
- 600 0 sink.text("License: " );
- 601 0 sink.bold_();
- 602 0 if (d.getLicense().startsWith("http://" ) && !d.getLicense().contains(" " )) {
- 603 0 sink.link(d.getLicense());
- 604 0 sink.text(d.getLicense());
- 605 0 sink.link_();
+ 594 0 sink.sectionTitle2();
+ 595 0 sink.anchor("sha1" + d.getSha1sum());
+ 596 0 sink.text(d.getFileName());
+ 597 0 sink.anchor_();
+ 598 0 sink.sectionTitle2_();
+ 599 0 if (d.getDescription() != null && d.getDescription().length() > 0) {
+ 600 0 sink.paragraph();
+ 601 0 sink.bold();
+ 602 0 sink.text("Description: " );
+ 603 0 sink.bold_();
+ 604 0 sink.text(d.getDescription());
+ 605 0 sink.paragraph_();
606
- } else {
- 607 0 sink.text(d.getLicense());
- 608
- }
- 609 0 sink.paragraph_();
- 610
}
- 611 0 }
- 612
-
- 613
-
- 614
-
- 615
-
+ 607 0 if (d.getLicense() != null && d.getLicense().length() > 0) {
+ 608 0 sink.paragraph();
+ 609 0 sink.bold();
+ 610 0 sink.text("License: " );
+ 611 0 sink.bold_();
+ 612 0 if (d.getLicense().startsWith("http://" ) && !d.getLicense().contains(" " )) {
+ 613 0 sink.link(d.getLicense());
+ 614 0 sink.text(d.getLicense());
+ 615 0 sink.link_();
616
-
- 617
-
+ } else { 617 0 sink.text(d.getLicense());
618
-
- 619
- private void writeListItem(Sink sink, String text) {
- 620 0 sink.listItem();
- 621 0 sink.text(text);
- 622 0 sink.listItem_();
- 623 0 }
+ } 619 0 sink.paragraph_();
+ 620
+ }
+ 621 0 }
+ 622
+
+ 623
+
624
-
+ 625
-
+ 626
-
+ 627
-
+ 628
-
+ 629
-
- 630
-
- 631
- private void writeTableCell(Sink sink, String text) {
- 632 0 sink.tableCell();
- 633 0 sink.text(text);
- 634 0 sink.tableCell_();
- 635 0 }
+ private void writeListItem(Sink sink, String text) { 630 0 sink.listItem();
+ 631 0 sink.text(text);
+ 632 0 sink.listItem_();
+ 633 0 }
+ 634
+
+ 635
+
636
-
+ 637
-
+ 638
-
+ 639
-
- 640
-
- 641
- 642
+ 640
- 643
- private void writeTableHeaderCell(Sink sink, String text) {
- 644 0 sink.tableHeaderCell();
- 645 0 sink.text(text);
- 646 0 sink.tableHeaderCell_();
- 647 0 }
+ 641
+ private void writeTableCell(Sink sink, String text) {
+ 642 0 sink.tableCell();
+ 643 0 sink.text(text);
+ 644 0 sink.tableCell_();
+ 645 0 }
+ 646
+
+ 647
+
648
-
+ 649
-
+ 650
-
+ 651
-
+ 652
-
+ 653
-
- 654
-
- 655
- private void writeSiteReportTOC(Sink sink, final List<Dependency> dependencies) {
- 656 0 sink.list();
- 657 0 for (Dependency d : dependencies) {
- 658 0 sink.listItem();
- 659 0 sink.link("#sha1" + d.getSha1sum());
- 660 0 sink.text(d.getFileName());
- 661 0 sink.link_();
- 662 0 if (!d.getVulnerabilities().isEmpty()) {
- 663 0 sink.rawText(" <font style=\"color:red\">•</font>" );
- 664
- }
- 665 0 if (!d.getRelatedDependencies().isEmpty()) {
- 666 0 sink.list();
- 667 0 for (Dependency r : d.getRelatedDependencies()) {
- 668 0 writeListItem(sink, r.getFileName());
- 669 0 }
- 670 0 sink.list_();
- 671
- }
- 672 0 sink.listItem_();
- 673 0 }
- 674 0 sink.list_();
- 675 0 }
- 676
+ private void writeTableHeaderCell(Sink sink, String text) {
+ 654 0 sink.tableHeaderCell();
+ 655 0 sink.text(text);
+ 656 0 sink.tableHeaderCell_();
+ 657 0 }
+ 658
- 677
+ 659
- 678
-
- 679
+ 660
+
+ 661
- 680
+ 662
- 681
-
- 682
+ 663
+
+ 664
- 683
- private void writeSiteReportHeader(Sink sink, String projectName) {
- 684 0 sink.head();
- 685 0 sink.title();
- 686 0 sink.text("Dependency-Check Report: " + projectName);
- 687 0 sink.title_();
- 688 0 sink.head_();
- 689 0 sink.body();
- 690 0 sink.rawText("<script type=\"text/javascript\">" );
- 691 0 sink.rawText("function toggleElement(el, targetId) {" );
- 692 0 sink.rawText("if (el.innerText == '[+]') {" );
- 693 0 sink.rawText(" el.innerText = '[-]';" );
- 694 0 sink.rawText(" document.getElementById(targetId).style.display='block';" );
- 695 0 sink.rawText("} else {" );
- 696 0 sink.rawText(" el.innerText = '[+]';" );
- 697 0 sink.rawText(" document.getElementById(targetId).style.display='none';" );
- 698 0 sink.rawText("}" );
- 699
-
- 700 0 sink.rawText("}" );
- 701 0 sink.rawText("</script>" );
- 702 0 sink.section1();
- 703 0 sink.sectionTitle1();
- 704 0 sink.text("Project: " + projectName);
- 705 0 sink.sectionTitle1_();
- 706 0 sink.date();
- 707 0 final Date now = new Date();
- 708 0 sink.text(DateFormat.getDateTimeInstance().format(now));
- 709 0 sink.date_();
- 710 0 sink.section1_();
- 711 0 }
- 712
-
- 713
-
- 714
-
- 715
-
- 716
-
- 717
-
- 718
- private void populateSettings() {
- 719 0 InputStream mojoProperties = null ;
- 720
- try {
- 721 0 mojoProperties = this .getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
- 722 0 Settings.mergeProperties(mojoProperties);
- 723 0 } catch (IOException ex) {
- 724 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, "Unable to load the dependency-check ant task.properties file." );
- 725 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
- 726
- } finally {
- 727 0 if (mojoProperties != null ) {
- 728
- try {
- 729 0 mojoProperties.close();
- 730 0 } catch (IOException ex) {
- 731 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINEST, null , ex);
- 732 0 }
- 733
+ 665
+ private void writeSiteReportTOC(Sink sink, final List<Dependency> dependencies) {
+ 666 0 sink.list();
+ 667 0 for (Dependency d : dependencies) {
+ 668 0 sink.listItem();
+ 669 0 sink.link("#sha1" + d.getSha1sum());
+ 670 0 sink.text(d.getFileName());
+ 671 0 sink.link_();
+ 672 0 if (!d.getVulnerabilities().isEmpty()) {
+ 673 0 sink.rawText(" <font style=\"color:red\">•</font>" );
+ 674
}
- 734
- }
- 735
+ 675 0 if (!d.getRelatedDependencies().isEmpty()) {
+ 676 0 sink.list();
+ 677 0 for (Dependency r : d.getRelatedDependencies()) {
+ 678 0 writeListItem(sink, r.getFileName());
+ 679 0 }
+ 680 0 sink.list_();
+ 681
+ }
+ 682 0 sink.listItem_();
+ 683 0 }
+ 684 0 sink.list_();
+ 685 0 }
+ 686
- 736 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
- 737
+ 687
+
+ 688
+
+ 689
+
+ 690
+
+ 691
+
+ 692
+
+ 693
+ private void writeSiteReportHeader(Sink sink, String projectName) {
+ 694 0 sink.head();
+ 695 0 sink.title();
+ 696 0 sink.text("Dependency-Check Report: " + projectName);
+ 697 0 sink.title_();
+ 698 0 sink.head_();
+ 699 0 sink.body();
+ 700 0 sink.rawText("<script type=\"text/javascript\">" );
+ 701 0 sink.rawText("function toggleElement(el, targetId) {" );
+ 702 0 sink.rawText("if (el.innerText == '[+]') {" );
+ 703 0 sink.rawText(" el.innerText = '[-]';" );
+ 704 0 sink.rawText(" document.getElementById(targetId).style.display='block';" );
+ 705 0 sink.rawText("} else {" );
+ 706 0 sink.rawText(" el.innerText = '[+]';" );
+ 707 0 sink.rawText(" document.getElementById(targetId).style.display='none';" );
+ 708 0 sink.rawText("}" );
+ 709
- 738 0 if (proxyUrl != null && !proxyUrl.isEmpty()) {
- 739 0 Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
- 740
- }
- 741 0 if (proxyPort != null && !proxyPort.isEmpty()) {
- 742 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
+ 710 0 sink.rawText("}" );
+ 711 0 sink.rawText("</script>" );
+ 712 0 sink.section1();
+ 713 0 sink.sectionTitle1();
+ 714 0 sink.text("Project: " + projectName);
+ 715 0 sink.sectionTitle1_();
+ 716 0 sink.date();
+ 717 0 final Date now = new Date();
+ 718 0 sink.text(DateFormat.getDateTimeInstance().format(now));
+ 719 0 sink.date_();
+ 720 0 sink.section1_();
+ 721 0 }
+ 722
+
+ 723
+
+ 724
+
+ 725
+
+ 726
+
+ 727
+
+ 728
+ private void populateSettings() {
+ 729 0 InputStream mojoProperties = null ;
+ 730
+ try {
+ 731 0 mojoProperties = this .getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
+ 732 0 Settings.mergeProperties(mojoProperties);
+ 733 0 } catch (IOException ex) {
+ 734 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, "Unable to load the dependency-check ant task.properties file." );
+ 735 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
+ 736
+ } finally {
+ 737 0 if (mojoProperties != null ) {
+ 738
+ try {
+ 739 0 mojoProperties.close();
+ 740 0 } catch (IOException ex) {
+ 741 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINEST, null , ex);
+ 742 0 }
743
+ }
+ 744
}
- 744 0 if (proxyUsername != null && !proxyUsername.isEmpty()) {
- 745 0 Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);
- 746
+ 745
+
+ 746 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
+ 747
+
+ 748 0 if (proxyUrl != null && !proxyUrl.isEmpty()) {
+ 749 0 Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
+ 750
}
- 747 0 if (proxyPassword != null && !proxyPassword.isEmpty()) {
- 748 0 Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);
- 749
+ 751 0 if (proxyPort != null && !proxyPort.isEmpty()) {
+ 752 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
+ 753
}
- 750 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {
- 751 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
- 752
+ 754 0 if (proxyUsername != null && !proxyUsername.isEmpty()) {
+ 755 0 Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);
+ 756
}
- 753 0 if (suppressionFile != null && !suppressionFile.isEmpty()) {
- 754 0 Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);
- 755
- }
- 756 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
- 757 0 if (nexusUrl != null && !nexusUrl.isEmpty()) {
- 758 0 Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);
+ 757 0 if (proxyPassword != null && !proxyPassword.isEmpty()) {
+ 758 0 Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);
759
}
- 760 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);
- 761 0 if (databaseDriverName != null && !databaseDriverName.isEmpty()) {
- 762 0 Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);
- 763
+ 760 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {
+ 761 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
+ 762
}
- 764 0 if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) {
- 765 0 Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);
- 766
+ 763 0 if (suppressionFile != null && !suppressionFile.isEmpty()) {
+ 764 0 Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);
+ 765
}
- 767 0 if (connectionString != null && !connectionString.isEmpty()) {
- 768 0 Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);
+ 766 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
+ 767 0 if (nexusUrl != null && !nexusUrl.isEmpty()) {
+ 768 0 Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);
769
}
- 770 0 if (databaseUser != null && !databaseUser.isEmpty()) {
- 771 0 Settings.setString(Settings.KEYS.DB_USER, databaseUser);
- 772
+ 770 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);
+ 771 0 if (databaseDriverName != null && !databaseDriverName.isEmpty()) {
+ 772 0 Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);
+ 773
}
- 773 0 if (databasePassword != null && !databasePassword.isEmpty()) {
- 774 0 Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);
- 775
- }
- 776 0 if (zipExtensions != null && !zipExtensions.isEmpty()) {
- 777 0 Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);
- 778
+ 774 0 if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) {
+ 775 0 Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);
+ 776
}
+ 777 0 if (connectionString != null && !connectionString.isEmpty()) {
+ 778 0 Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);
779
-
- 780
-
- 781 0 Settings.setBoolean(Settings.KEYS.SKIP_TEST_SCOPE, skipTestScope);
- 782 0 Settings.setBoolean(Settings.KEYS.SKIP_RUNTIME_SCOPE, skipRuntimeScope);
- 783 0 Settings.setBoolean(Settings.KEYS.SKIP_PROVIDED_SCOPE, skipProvidedScope);
- 784
-
+ } 780 0 if (databaseUser != null && !databaseUser.isEmpty()) {
+ 781 0 Settings.setString(Settings.KEYS.DB_USER, databaseUser);
+ 782
+ }
+ 783 0 if (databasePassword != null && !databasePassword.isEmpty()) {
+ 784 0 Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);
785
-
- 786 0 if (dataDirectory != null && !dataDirectory.isEmpty()) {
- 787 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);
+ } 786 0 if (zipExtensions != null && !zipExtensions.isEmpty()) {
+ 787 0 Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);
788
}
789
790
-
- 791 0 if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) {
- 792 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);
- 793
+
+ 791 0 Settings.setBoolean(Settings.KEYS.SKIP_TEST_SCOPE, skipTestScope);
+ 792 0 Settings.setBoolean(Settings.KEYS.SKIP_RUNTIME_SCOPE, skipRuntimeScope);
+ 793 0 Settings.setBoolean(Settings.KEYS.SKIP_PROVIDED_SCOPE, skipProvidedScope);
+ 794
+
+ 795
+
+ 796 0 if (dataDirectory != null && !dataDirectory.isEmpty()) {
+ 797 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);
+ 798
}
- 794 0 if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) {
- 795 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);
- 796
- }
- 797 0 if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) {
- 798 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);
799
- }
- 800 0 if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) {
- 801 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);
- 802
- }
- 803 0 }
- 804
- 805
-
+ 800
+
+ 801 0 if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) {
+ 802 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);
+ 803
+ }
+ 804 0 if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) {
+ 805 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);
806
-
- 807
-
- 808
-
- 809
-
- 810
-
- 811
- public void execute() throws MojoExecutionException, MojoFailureException {
- 812 0 Engine engine = null ;
- 813
- try {
- 814 0 engine = executeDependencyCheck();
- 815 0 generateExternalReports(engine);
- 816 0 if (this .showSummary) {
- 817 0 showSummary(engine.getDependencies());
- 818
- }
- 819 0 if (this .failBuildOnCVSS <= 10) {
- 820 0 checkForFailure(engine.getDependencies());
- 821
- }
- 822 0 } catch (DatabaseException ex) {
- 823 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
- 824
- "Unable to connect to the dependency-check database; analysis has stopped" );
- 825 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "" , ex);
- 826
- } finally {
- 827 0 if (engine != null ) {
- 828 0 engine.cleanup();
- 829
- }
- 830
}
- 831 0 }
- 832
+ 807 0 if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) {
+ 808 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);
+ 809
+ }
+ 810 0 if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) {
+ 811 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);
+ 812
+ }
+ 813 0 if (pathToMono != null && !pathToMono.isEmpty()) {
+ 814 0 Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);
+ 815
+ }
+ 816 0 }
+ 817
- 833
+ 818
- 834
-
- 835
+ 819
+
+ 820
- 836
-
- 837
-
- 838
-
- 839
+ 821
+
+ 822
+
+ 823
- 840
- public void generate(@SuppressWarnings("deprecation" ) org.codehaus.doxia.sink.Sink sink,
- 841
- Locale locale) throws MavenReportException {
- 842 0 generate((Sink) sink, null , locale);
- 843 0 }
- 844
-
+ 824
+ public void execute() throws MojoExecutionException, MojoFailureException {
+ 825 0 Engine engine = null ;
+ 826
+ try {
+ 827 0 engine = executeDependencyCheck();
+ 828 0 generateExternalReports(engine);
+ 829 0 if (this .showSummary) {
+ 830 0 showSummary(engine.getDependencies());
+ 831
+ }
+ 832 0 if (this .failBuildOnCVSS <= 10) {
+ 833 0 checkForFailure(engine.getDependencies());
+ 834
+ }
+ 835 0 } catch (DatabaseException ex) {
+ 836 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ 837
+ "Unable to connect to the dependency-check database; analysis has stopped" );
+ 838 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "" , ex);
+ 839
+ } finally {
+ 840 0 if (engine != null ) {
+ 841 0 engine.cleanup();
+ 842
+ }
+ 843
+ }
+ 844 0 }
845
-
+ 846
-
+ 847
-
+ 848
-
+ 849
-
+ 850
851
-
+ 852
853
- public void generate(Sink sink, SinkFactory sinkFactory, Locale locale) throws MavenReportException {
- 854 0 Engine engine = null ;
- 855
- try {
- 856 0 engine = executeDependencyCheck();
- 857 0 generateMavenSiteReport(engine, sink);
- 858 0 } catch (DatabaseException ex) {
- 859 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
+ public void generate(@SuppressWarnings("deprecation" ) org.codehaus.doxia.sink.Sink sink, 854
+ Locale locale) throws MavenReportException {
+ 855 0 generate((Sink) sink, null , locale);
+ 856 0 }
+ 857
+
+ 858
+
+ 859
+
860
- "Unable to connect to the dependency-check database; analysis has stopped" );
- 861 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "" , ex);
+ 861
+
862
- } finally {
- 863 0 if (engine != null ) {
- 864 0 engine.cleanup();
+ 863
+
+ 864
+
865
- }
+ 866
- }
- 867 0 }
+ public void generate(Sink sink, SinkFactory sinkFactory, Locale locale) throws MavenReportException { 867 0 Engine engine = null ;
868
-
- 869
-
- 870
-
- 871
-
- 872
-
+ try { 869 0 engine = executeDependencyCheck();
+ 870 0 generateMavenSiteReport(engine, sink);
+ 871 0 } catch (DatabaseException ex) {
+ 872 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE,
873
-
- 874
-
+ "Unable to connect to the dependency-check database; analysis has stopped" ); 874 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, "" , ex);
875
- public String getOutputName() {
- 876 0 return reportName;
- 877
- }
+ } finally { 876 0 if (engine != null ) {
+ 877 0 engine.cleanup();
878
-
- 879
-
- 880
-
- 881
-
- 882
-
- 883
-
- 884
- public String getCategoryName() {
- 885 0 return MavenReport.CATEGORY_PROJECT_REPORTS;
- 886
- }
- 887
-
- 888
-
- 889
-
- 890
-
- 891
-
- 892
-
- 893
-
- 894
- public String getName(Locale locale) {
- 895 0 return name;
- 896
- }
- 897
-
- 898
-
- 899
-
- 900
-
- 901
-
- 902
-
- 903
- public void setReportOutputDirectory(File directory) {
- 904 0 reportOutputDirectory = directory;
- 905 0 }
- 906
-
- 907
-
- 908
-
- 909
-
- 910
-
- 911
-
- 912
- public File getReportOutputDirectory() {
- 913 0 return reportOutputDirectory;
- 914
- }
- 915
-
- 916
-
- 917
-
- 918
-
- 919
-
- 920
-
- 921
-
- 922
- public String getDescription(Locale locale) {
- 923 0 return description;
- 924
- }
- 925
-
- 926
-
- 927
-
- 928
-
- 929
-
- 930
-
- 931
- public boolean isExternalReport() {
- 932 0 return externalReport;
- 933
- }
- 934
-
- 935
-
- 936
-
- 937
-
- 938
-
- 939
-
- 940
- public boolean canGenerateReport() {
- 941 0 return true ;
- 942
- }
- 943
-
- 944
-
- 945
-
- 946
-
- 947
-
- 948
-
- 949
-
- 950
-
- 951
-
- 952
- private void checkForFailure(List<Dependency> dependencies) throws MojoFailureException {
- 953 0 final StringBuilder ids = new StringBuilder();
- 954 0 for (Dependency d : dependencies) {
- 955 0 boolean addName = true ;
- 956 0 for (Vulnerability v : d.getVulnerabilities()) {
- 957 0 if (v.getCvssScore() >= failBuildOnCVSS) {
- 958 0 if (addName) {
- 959 0 addName = false ;
- 960 0 ids.append(NEW_LINE).append(d.getFileName()).append(": " );
- 961 0 ids.append(v.getName());
- 962
- } else {
- 963 0 ids.append(", " ).append(v.getName());
- 964
- }
- 965
- }
- 966 0 }
- 967 0 }
- 968 0 if (ids.length() > 0) {
- 969 0 final String msg = String.format("%n%nDependency-Check Failure:%n"
- 970
- + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"
- 971
- + "See the dependency-check report for more details.%n%n" , failBuildOnCVSS, ids.toString());
- 972 0 throw new MojoFailureException(msg);
- 973
- }
- 974 0 }
- 975
-
- 976
-
- 977
-
- 978
-
- 979
-
- 980
-
- 981
- private void showSummary(List<Dependency> dependencies) {
- 982 0 final StringBuilder summary = new StringBuilder();
- 983 0 for (Dependency d : dependencies) {
- 984 0 boolean firstEntry = true ;
- 985 0 final StringBuilder ids = new StringBuilder();
- 986 0 for (Vulnerability v : d.getVulnerabilities()) {
- 987 0 if (firstEntry) {
- 988 0 firstEntry = false ;
- 989
- } else {
- 990 0 ids.append(", " );
- 991
- }
- 992 0 ids.append(v.getName());
- 993 0 }
- 994 0 if (ids.length() > 0) {
- 995 0 summary.append(d.getFileName()).append(" (" );
- 996 0 firstEntry = true ;
- 997 0 for (Identifier id : d.getIdentifiers()) {
- 998 0 if (firstEntry) {
- 999 0 firstEntry = false ;
- 1000
- } else {
- 1001 0 summary.append(", " );
- 1002
- }
- 1003 0 summary.append(id.getValue());
- 1004 0 }
- 1005 0 summary.append(") : " ).append(ids).append(NEW_LINE);
- 1006
}
- 1007 0 }
- 1008 0 if (summary.length() > 0) {
- 1009 0 final String msg = String.format("%n%n"
- 1010
- + "One or more dependencies were identified with known vulnerabilities:%n%n%s"
- 1011
- + "%n%nSee the dependency-check report for more details.%n%n" , summary.toString());
- 1012 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, msg);
- 1013
+ 879
}
- 1014 0 }
+ 880 0 }
+ 881
+
+ 882
+
+ 883
+
+ 884
+
+ 885
+
+ 886
+
+ 887
+
+ 888
+ public String getOutputName() {
+ 889 0 return reportName;
+ 890
+ }
+ 891
+
+ 892
+
+ 893
+
+ 894
+
+ 895
+
+ 896
+
+ 897
+ public String getCategoryName() {
+ 898 0 return MavenReport.CATEGORY_PROJECT_REPORTS;
+ 899
+ }
+ 900
+
+ 901
+
+ 902
+
+ 903
+
+ 904
+
+ 905
+
+ 906
+
+ 907
+ public String getName(Locale locale) {
+ 908 0 return name;
+ 909
+ }
+ 910
+
+ 911
+
+ 912
+
+ 913
+
+ 914
+
+ 915
+
+ 916
+ public void setReportOutputDirectory(File directory) {
+ 917 0 reportOutputDirectory = directory;
+ 918 0 }
+ 919
+
+ 920
+
+ 921
+
+ 922
+
+ 923
+
+ 924
+
+ 925
+ public File getReportOutputDirectory() {
+ 926 0 return reportOutputDirectory;
+ 927
+ }
+ 928
+
+ 929
+
+ 930
+
+ 931
+
+ 932
+
+ 933
+
+ 934
+
+ 935
+ public String getDescription(Locale locale) {
+ 936 0 return description;
+ 937
+ }
+ 938
+
+ 939
+
+ 940
+
+ 941
+
+ 942
+
+ 943
+
+ 944
+ public boolean isExternalReport() {
+ 945 0 return externalReport;
+ 946
+ }
+ 947
+
+ 948
+
+ 949
+
+ 950
+
+ 951
+
+ 952
+
+ 953
+ public boolean canGenerateReport() {
+ 954 0 return true ;
+ 955
+ }
+ 956
+
+ 957
+
+ 958
+
+ 959
+
+ 960
+
+ 961
+
+ 962
+
+ 963
+
+ 964
+
+ 965
+ private void checkForFailure(List<Dependency> dependencies) throws MojoFailureException {
+ 966 0 final StringBuilder ids = new StringBuilder();
+ 967 0 for (Dependency d : dependencies) {
+ 968 0 boolean addName = true ;
+ 969 0 for (Vulnerability v : d.getVulnerabilities()) {
+ 970 0 if (v.getCvssScore() >= failBuildOnCVSS) {
+ 971 0 if (addName) {
+ 972 0 addName = false ;
+ 973 0 ids.append(NEW_LINE).append(d.getFileName()).append(": " );
+ 974 0 ids.append(v.getName());
+ 975
+ } else {
+ 976 0 ids.append(", " ).append(v.getName());
+ 977
+ }
+ 978
+ }
+ 979 0 }
+ 980 0 }
+ 981 0 if (ids.length() > 0) {
+ 982 0 final String msg = String.format("%n%nDependency-Check Failure:%n"
+ 983
+ + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"
+ 984
+ + "See the dependency-check report for more details.%n%n" , failBuildOnCVSS, ids.toString());
+ 985 0 throw new MojoFailureException(msg);
+ 986
+ }
+ 987 0 }
+ 988
+
+ 989
+
+ 990
+
+ 991
+
+ 992
+
+ 993
+
+ 994
+ private void showSummary(List<Dependency> dependencies) {
+ 995 0 final StringBuilder summary = new StringBuilder();
+ 996 0 for (Dependency d : dependencies) {
+ 997 0 boolean firstEntry = true ;
+ 998 0 final StringBuilder ids = new StringBuilder();
+ 999 0 for (Vulnerability v : d.getVulnerabilities()) {
+ 1000 0 if (firstEntry) {
+ 1001 0 firstEntry = false ;
+ 1002
+ } else {
+ 1003 0 ids.append(", " );
+ 1004
+ }
+ 1005 0 ids.append(v.getName());
+ 1006 0 }
+ 1007 0 if (ids.length() > 0) {
+ 1008 0 summary.append(d.getFileName()).append(" (" );
+ 1009 0 firstEntry = true ;
+ 1010 0 for (Identifier id : d.getIdentifiers()) {
+ 1011 0 if (firstEntry) {
+ 1012 0 firstEntry = false ;
+ 1013
+ } else {
+ 1014 0 summary.append(", " );
1015
+ }
+ 1016 0 summary.append(id.getValue());
+ 1017 0 }
+ 1018 0 summary.append(") : " ).append(ids).append(NEW_LINE);
+ 1019
+ }
+ 1020 0 }
+ 1021 0 if (summary.length() > 0) {
+ 1022 0 final String msg = String.format("%n%n"
+ 1023
+ + "One or more dependencies were identified with known vulnerabilities:%n%n%s"
+ 1024
+ + "%n%nSee the dependency-check report for more details.%n%n" , summary.toString());
+ 1025 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, msg);
+ 1026
+ }
+ 1027 0 }
+ 1028
}
-
+
diff --git a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.HelpMojo.html b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.HelpMojo.html
index a60952ab5..5119d28db 100644
--- a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.HelpMojo.html
+++ b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.HelpMojo.html
@@ -744,6 +744,6 @@
} dependency-check-maven - Configuration
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2014-03-03| Last Published: 2014-03-10
- Version: 1.1.2
+ Version: 1.1.3
