From d31e0453bd497b9a6de8f10a8b9f7b1e92c52ea1 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Mon, 20 Feb 2017 07:01:05 -0500
Subject: [PATCH] fix for #660

---
 .../main/resources/dependencycheck-base-suppression.xml   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 409bf11e6..ddc239276 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -507,4 +507,12 @@
         <gav regex="true">^io\.jsonwebtoken:jjwt:.*$</gav>
         <cpe>cpe:/a:sonatype:nexus</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        False positive suppression per issue #660 - the organization name contains http:// so it gets flagged as http server.
+        ]]></notes>
+        <gav regex="true">^commons-validator:commons-validator:.*$</gav>
+        <cpe>cpe:/a:apache:http_server</cpe>
+        <cpe>cpe:/a:apache:apache_http_server</cpe>
+    </suppress>
 </suppressions>