mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-15 08:13:43 +01:00
version 1.4.3 documentation
This commit is contained in:
Jeremy Long
@@ -189,7 +189,7 @@
|
||||
<a href="org/owasp/dependencycheck/data/update/nvd/NvdCveInfoTest.html" target="classFrame">NvdCveInfoTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="org/owasp/dependencycheck/data/update/nvd/NvdCveUpdaterIntegrationTest.html" target="classFrame">NvdCveUpdaterIntegrationTest</a>
|
||||
<a href="org/owasp/dependencycheck/data/update/NvdCveUpdaterIntegrationTest.html" target="classFrame">NvdCveUpdaterIntegrationTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="org/owasp/dependencycheck/data/update/nvd/NvdCve_1_2_HandlerTest.html" target="classFrame">NvdCve_1_2_HandlerTest</a>
|
||||
@@ -238,6 +238,9 @@
|
||||
</li>
|
||||
<li>
|
||||
<a href="org/owasp/dependencycheck/xml/suppression/SuppressionRuleTest.html" target="classFrame">SuppressionRuleTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="org/owasp/dependencycheck/analyzer/SwiftAnalyzersTest.html" target="classFrame">SwiftAnalyzersTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="org/owasp/dependencycheck/data/lucene/TokenPairConcatenatingFilterTest.html" target="classFrame">TokenPairConcatenatingFilterTest</a>
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
<!-- this is a JXR report set -->
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference</title>
|
||||
<title>Dependency-Check 1.4.3 Reference</title>
|
||||
</head>
|
||||
<frameset cols="20%,80%">
|
||||
<frameset rows="30%,70%">
|
||||
|
||||
@@ -32,161 +32,164 @@
|
||||
<a class="jxr_linenumber" name="L24" href="#L24">24</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assert.fail;
|
||||
<a class="jxr_linenumber" name="L25" href="#L25">25</a> <strong class="jxr_keyword">import</strong> org.junit.Assume;
|
||||
<a class="jxr_linenumber" name="L26" href="#L26">26</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assume.assumeFalse;
|
||||
<a class="jxr_linenumber" name="L27" href="#L27">27</a> <strong class="jxr_keyword">import</strong> org.junit.Before;
|
||||
<a class="jxr_linenumber" name="L28" href="#L28">28</a> <strong class="jxr_keyword">import</strong> org.junit.Test;
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.BaseTest;
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.analyzer.exception.AnalysisException;
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Confidence;
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Dependency;
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Evidence;
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.exception.InitializationException;
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> <strong class="jxr_keyword">import</strong> org.slf4j.Logger;
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">import</strong> org.slf4j.LoggerFactory;
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a>
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> <em class="jxr_javadoccomment"> * Tests for the AssemblyAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> <em class="jxr_javadoccomment"> * @author colezlaw</em>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/analyzer/AssemblyAnalyzerTest.html">AssemblyAnalyzerTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../org/owasp/dependencycheck/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a>
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> Logger LOGGER = LoggerFactory.getLogger(AssemblyAnalyzerTest.<strong class="jxr_keyword">class</strong>);
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String LOG_KEY = <span class="jxr_string">"org.slf4j.simpleLogger.org.owasp.dependencycheck.analyzer.AssemblyAnalyzer"</span>;
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a>
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> AssemblyAnalyzer analyzer;
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a>
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> <em class="jxr_javadoccomment"> * Sets up the analyzer.</em>
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> <em class="jxr_javadoccomment"> * @throws Exception if anything goes sideways</em>
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> @Before
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setUp() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> analyzer = <strong class="jxr_keyword">new</strong> AssemblyAnalyzer();
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> analyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"test.dll"</span>)); <em class="jxr_comment">// trick into "thinking it is active"</em>
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L64" href="#L64">64</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L65" href="#L65">65</a> <strong class="jxr_keyword">if</strong> (e.getMessage().contains(<span class="jxr_string">"Could not execute .NET AssemblyAnalyzer"</span>)) {
|
||||
<a class="jxr_linenumber" name="L66" href="#L66">66</a> LOGGER.warn(<span class="jxr_string">"Exception setting up AssemblyAnalyzer. Tests will be incomplete"</span>);
|
||||
<a class="jxr_linenumber" name="L67" href="#L67">67</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L27" href="#L27">27</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assume.assumeNotNull;
|
||||
<a class="jxr_linenumber" name="L28" href="#L28">28</a> <strong class="jxr_keyword">import</strong> org.junit.Before;
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <strong class="jxr_keyword">import</strong> org.junit.Test;
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.BaseTest;
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.analyzer.exception.AnalysisException;
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Confidence;
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Dependency;
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Evidence;
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.exception.InitializationException;
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">import</strong> org.slf4j.Logger;
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a> <strong class="jxr_keyword">import</strong> org.slf4j.LoggerFactory;
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a>
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> <em class="jxr_javadoccomment"> * Tests for the AssemblyAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <em class="jxr_javadoccomment"> * @author colezlaw</em>
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/analyzer/AssemblyAnalyzerTest.html">AssemblyAnalyzerTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../org/owasp/dependencycheck/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a>
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> Logger LOGGER = LoggerFactory.getLogger(AssemblyAnalyzerTest.<strong class="jxr_keyword">class</strong>);
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String LOG_KEY = <span class="jxr_string">"org.slf4j.simpleLogger.org.owasp.dependencycheck.analyzer.AssemblyAnalyzer"</span>;
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a>
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> AssemblyAnalyzer analyzer;
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a>
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> <em class="jxr_javadoccomment"> * Sets up the analyzer.</em>
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> <em class="jxr_javadoccomment"> * @throws Exception if anything goes sideways</em>
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> @Before
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setUp() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> analyzer = <strong class="jxr_keyword">new</strong> AssemblyAnalyzer();
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> analyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"test.dll"</span>)); <em class="jxr_comment">// trick into "thinking it is active"</em>
|
||||
<a class="jxr_linenumber" name="L64" href="#L64">64</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L65" href="#L65">65</a> Assume.assumeTrue(<span class="jxr_string">"Mono is not installed, skipping tests."</span>, analyzer.buildArgumentList() == <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L66" href="#L66">66</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L67" href="#L67">67</a> <strong class="jxr_keyword">if</strong> (e.getMessage().contains(<span class="jxr_string">"Could not execute .NET AssemblyAnalyzer"</span>)) {
|
||||
<a class="jxr_linenumber" name="L68" href="#L68">68</a> LOGGER.warn(<span class="jxr_string">"Exception setting up AssemblyAnalyzer. Tests will be incomplete"</span>);
|
||||
<a class="jxr_linenumber" name="L69" href="#L69">69</a> }
|
||||
<a class="jxr_linenumber" name="L70" href="#L70">70</a> Assume.assumeNoException(<span class="jxr_string">"Is mono installed? TESTS WILL BE INCOMPLETE"</span>, e);
|
||||
<a class="jxr_linenumber" name="L71" href="#L71">71</a> }
|
||||
<a class="jxr_linenumber" name="L72" href="#L72">72</a> }
|
||||
<a class="jxr_linenumber" name="L73" href="#L73">73</a>
|
||||
<a class="jxr_linenumber" name="L74" href="#L74">74</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L75" href="#L75">75</a> <em class="jxr_javadoccomment"> * Tests to make sure the name is correct.</em>
|
||||
<a class="jxr_linenumber" name="L76" href="#L76">76</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L77" href="#L77">77</a> @Test
|
||||
<a class="jxr_linenumber" name="L78" href="#L78">78</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testGetName() {
|
||||
<a class="jxr_linenumber" name="L79" href="#L79">79</a> assertEquals(<span class="jxr_string">"Assembly Analyzer"</span>, analyzer.getName());
|
||||
<a class="jxr_linenumber" name="L80" href="#L80">80</a> }
|
||||
<a class="jxr_linenumber" name="L81" href="#L81">81</a>
|
||||
<a class="jxr_linenumber" name="L82" href="#L82">82</a> @Test
|
||||
<a class="jxr_linenumber" name="L83" href="#L83">83</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testAnalysis() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L84" href="#L84">84</a> <em class="jxr_comment">//File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("GrokAssembly.exe").getPath());</em>
|
||||
<a class="jxr_linenumber" name="L85" href="#L85">85</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"GrokAssembly.exe"</span>);
|
||||
<a class="jxr_linenumber" name="L86" href="#L86">86</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(f);
|
||||
<a class="jxr_linenumber" name="L87" href="#L87">87</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L88" href="#L88">88</a> <strong class="jxr_keyword">boolean</strong> foundVendor = false;
|
||||
<a class="jxr_linenumber" name="L89" href="#L89">89</a> <strong class="jxr_keyword">for</strong> (Evidence e : d.getVendorEvidence().getEvidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"vendor"</span>)) {
|
||||
<a class="jxr_linenumber" name="L90" href="#L90">90</a> <strong class="jxr_keyword">if</strong> (<span class="jxr_string">"OWASP"</span>.equals(e.getValue())) {
|
||||
<a class="jxr_linenumber" name="L91" href="#L91">91</a> foundVendor = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L92" href="#L92">92</a> }
|
||||
<a class="jxr_linenumber" name="L93" href="#L93">93</a> }
|
||||
<a class="jxr_linenumber" name="L94" href="#L94">94</a> assertTrue(foundVendor);
|
||||
<a class="jxr_linenumber" name="L95" href="#L95">95</a>
|
||||
<a class="jxr_linenumber" name="L96" href="#L96">96</a> <strong class="jxr_keyword">boolean</strong> foundProduct = false;
|
||||
<a class="jxr_linenumber" name="L97" href="#L97">97</a> <strong class="jxr_keyword">for</strong> (Evidence e : d.getProductEvidence().getEvidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"product"</span>)) {
|
||||
<a class="jxr_linenumber" name="L98" href="#L98">98</a> <strong class="jxr_keyword">if</strong> (<span class="jxr_string">"GrokAssembly"</span>.equals(e.getValue())) {
|
||||
<a class="jxr_linenumber" name="L99" href="#L99">99</a> foundProduct = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L100" href="#L100">100</a> }
|
||||
<a class="jxr_linenumber" name="L101" href="#L101">101</a> }
|
||||
<a class="jxr_linenumber" name="L102" href="#L102">102</a> assertTrue(foundProduct);
|
||||
<a class="jxr_linenumber" name="L103" href="#L103">103</a> }
|
||||
<a class="jxr_linenumber" name="L104" href="#L104">104</a>
|
||||
<a class="jxr_linenumber" name="L105" href="#L105">105</a> @Test
|
||||
<a class="jxr_linenumber" name="L106" href="#L106">106</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testLog4Net() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L107" href="#L107">107</a> <em class="jxr_comment">//File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("log4net.dll").getPath());</em>
|
||||
<a class="jxr_linenumber" name="L108" href="#L108">108</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"log4net.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L109" href="#L109">109</a>
|
||||
<a class="jxr_linenumber" name="L110" href="#L110">110</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(f);
|
||||
<a class="jxr_linenumber" name="L111" href="#L111">111</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L112" href="#L112">112</a> assertTrue(d.getVersionEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"version"</span>, <span class="jxr_string">"1.2.13.0"</span>, Confidence.HIGHEST)));
|
||||
<a class="jxr_linenumber" name="L113" href="#L113">113</a> assertTrue(d.getVendorEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"vendor"</span>, <span class="jxr_string">"The Apache Software Foundation"</span>, Confidence.HIGH)));
|
||||
<a class="jxr_linenumber" name="L114" href="#L114">114</a> assertTrue(d.getProductEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"product"</span>, <span class="jxr_string">"log4net"</span>, Confidence.HIGH)));
|
||||
<a class="jxr_linenumber" name="L115" href="#L115">115</a> }
|
||||
<a class="jxr_linenumber" name="L116" href="#L116">116</a>
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> @Test
|
||||
<a class="jxr_linenumber" name="L118" href="#L118">118</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testNonexistent() {
|
||||
<a class="jxr_linenumber" name="L119" href="#L119">119</a> <em class="jxr_comment">// Tweak the log level so the warning doesn't show in the console</em>
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a> String oldProp = System.getProperty(LOG_KEY, <span class="jxr_string">"info"</span>);
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a> <em class="jxr_comment">//File f = new File(AssemblyAnalyzerTest.class.getClassLoader().getResource("log4net.dll").getPath());</em>
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"log4net.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> File test = <strong class="jxr_keyword">new</strong> File(f.getParent(), <span class="jxr_string">"nonexistent.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L124" href="#L124">124</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(test);
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a>
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L127" href="#L127">127</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L128" href="#L128">128</a> fail(<span class="jxr_string">"Expected an AnalysisException"</span>);
|
||||
<a class="jxr_linenumber" name="L129" href="#L129">129</a> } <strong class="jxr_keyword">catch</strong> (AnalysisException ae) {
|
||||
<a class="jxr_linenumber" name="L130" href="#L130">130</a> assertEquals(<span class="jxr_string">"File does not exist"</span>, ae.getMessage());
|
||||
<a class="jxr_linenumber" name="L131" href="#L131">131</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L132" href="#L132">132</a> System.setProperty(LOG_KEY, oldProp);
|
||||
<a class="jxr_linenumber" name="L133" href="#L133">133</a> }
|
||||
<a class="jxr_linenumber" name="L134" href="#L134">134</a> }
|
||||
<a class="jxr_linenumber" name="L135" href="#L135">135</a>
|
||||
<a class="jxr_linenumber" name="L136" href="#L136">136</a> @Test
|
||||
<a class="jxr_linenumber" name="L137" href="#L137">137</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testWithSettingMono() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L69" href="#L69">69</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L70" href="#L70">70</a> LOGGER.warn(<span class="jxr_string">"Exception setting up AssemblyAnalyzer. Tests will be incomplete"</span>);
|
||||
<a class="jxr_linenumber" name="L71" href="#L71">71</a> }
|
||||
<a class="jxr_linenumber" name="L72" href="#L72">72</a> Assume.assumeNoException(<span class="jxr_string">"Is mono installed? TESTS WILL BE INCOMPLETE"</span>, e);
|
||||
<a class="jxr_linenumber" name="L73" href="#L73">73</a> }
|
||||
<a class="jxr_linenumber" name="L74" href="#L74">74</a> }
|
||||
<a class="jxr_linenumber" name="L75" href="#L75">75</a>
|
||||
<a class="jxr_linenumber" name="L76" href="#L76">76</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L77" href="#L77">77</a> <em class="jxr_javadoccomment"> * Tests to make sure the name is correct.</em>
|
||||
<a class="jxr_linenumber" name="L78" href="#L78">78</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L79" href="#L79">79</a> @Test
|
||||
<a class="jxr_linenumber" name="L80" href="#L80">80</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testGetName() {
|
||||
<a class="jxr_linenumber" name="L81" href="#L81">81</a> assertEquals(<span class="jxr_string">"Assembly Analyzer"</span>, analyzer.getName());
|
||||
<a class="jxr_linenumber" name="L82" href="#L82">82</a> }
|
||||
<a class="jxr_linenumber" name="L83" href="#L83">83</a>
|
||||
<a class="jxr_linenumber" name="L84" href="#L84">84</a> @Test
|
||||
<a class="jxr_linenumber" name="L85" href="#L85">85</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testAnalysis() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L86" href="#L86">86</a> assumeNotNull(analyzer.buildArgumentList());
|
||||
<a class="jxr_linenumber" name="L87" href="#L87">87</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"GrokAssembly.exe"</span>);
|
||||
<a class="jxr_linenumber" name="L88" href="#L88">88</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(f);
|
||||
<a class="jxr_linenumber" name="L89" href="#L89">89</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L90" href="#L90">90</a> <strong class="jxr_keyword">boolean</strong> foundVendor = false;
|
||||
<a class="jxr_linenumber" name="L91" href="#L91">91</a> <strong class="jxr_keyword">for</strong> (Evidence e : d.getVendorEvidence().getEvidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"vendor"</span>)) {
|
||||
<a class="jxr_linenumber" name="L92" href="#L92">92</a> <strong class="jxr_keyword">if</strong> (<span class="jxr_string">"OWASP"</span>.equals(e.getValue())) {
|
||||
<a class="jxr_linenumber" name="L93" href="#L93">93</a> foundVendor = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L94" href="#L94">94</a> }
|
||||
<a class="jxr_linenumber" name="L95" href="#L95">95</a> }
|
||||
<a class="jxr_linenumber" name="L96" href="#L96">96</a> assertTrue(foundVendor);
|
||||
<a class="jxr_linenumber" name="L97" href="#L97">97</a>
|
||||
<a class="jxr_linenumber" name="L98" href="#L98">98</a> <strong class="jxr_keyword">boolean</strong> foundProduct = false;
|
||||
<a class="jxr_linenumber" name="L99" href="#L99">99</a> <strong class="jxr_keyword">for</strong> (Evidence e : d.getProductEvidence().getEvidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"product"</span>)) {
|
||||
<a class="jxr_linenumber" name="L100" href="#L100">100</a> <strong class="jxr_keyword">if</strong> (<span class="jxr_string">"GrokAssembly"</span>.equals(e.getValue())) {
|
||||
<a class="jxr_linenumber" name="L101" href="#L101">101</a> foundProduct = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L102" href="#L102">102</a> }
|
||||
<a class="jxr_linenumber" name="L103" href="#L103">103</a> }
|
||||
<a class="jxr_linenumber" name="L104" href="#L104">104</a> assertTrue(foundProduct);
|
||||
<a class="jxr_linenumber" name="L105" href="#L105">105</a> }
|
||||
<a class="jxr_linenumber" name="L106" href="#L106">106</a>
|
||||
<a class="jxr_linenumber" name="L107" href="#L107">107</a> @Test
|
||||
<a class="jxr_linenumber" name="L108" href="#L108">108</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testLog4Net() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L109" href="#L109">109</a> assumeNotNull(analyzer.buildArgumentList());
|
||||
<a class="jxr_linenumber" name="L110" href="#L110">110</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"log4net.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L111" href="#L111">111</a>
|
||||
<a class="jxr_linenumber" name="L112" href="#L112">112</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(f);
|
||||
<a class="jxr_linenumber" name="L113" href="#L113">113</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L114" href="#L114">114</a> assertTrue(d.getVersionEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"version"</span>, <span class="jxr_string">"1.2.13.0"</span>, Confidence.HIGHEST)));
|
||||
<a class="jxr_linenumber" name="L115" href="#L115">115</a> assertTrue(d.getVendorEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"vendor"</span>, <span class="jxr_string">"The Apache Software Foundation"</span>, Confidence.HIGH)));
|
||||
<a class="jxr_linenumber" name="L116" href="#L116">116</a> assertTrue(d.getProductEvidence().getEvidence().contains(<strong class="jxr_keyword">new</strong> Evidence(<span class="jxr_string">"grokassembly"</span>, <span class="jxr_string">"product"</span>, <span class="jxr_string">"log4net"</span>, Confidence.HIGH)));
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> }
|
||||
<a class="jxr_linenumber" name="L118" href="#L118">118</a>
|
||||
<a class="jxr_linenumber" name="L119" href="#L119">119</a> @Test
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testNonexistent() {
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a> assumeNotNull(analyzer.buildArgumentList());
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a>
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> <em class="jxr_comment">// Tweak the log level so the warning doesn't show in the console</em>
|
||||
<a class="jxr_linenumber" name="L124" href="#L124">124</a> String oldProp = System.getProperty(LOG_KEY, <span class="jxr_string">"info"</span>);
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a> File f = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"log4net.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> File test = <strong class="jxr_keyword">new</strong> File(f.getParent(), <span class="jxr_string">"nonexistent.dll"</span>);
|
||||
<a class="jxr_linenumber" name="L127" href="#L127">127</a> Dependency d = <strong class="jxr_keyword">new</strong> Dependency(test);
|
||||
<a class="jxr_linenumber" name="L128" href="#L128">128</a>
|
||||
<a class="jxr_linenumber" name="L129" href="#L129">129</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L130" href="#L130">130</a> analyzer.analyze(d, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L131" href="#L131">131</a> fail(<span class="jxr_string">"Expected an AnalysisException"</span>);
|
||||
<a class="jxr_linenumber" name="L132" href="#L132">132</a> } <strong class="jxr_keyword">catch</strong> (AnalysisException ae) {
|
||||
<a class="jxr_linenumber" name="L133" href="#L133">133</a> assertEquals(<span class="jxr_string">"File does not exist"</span>, ae.getMessage());
|
||||
<a class="jxr_linenumber" name="L134" href="#L134">134</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L135" href="#L135">135</a> System.setProperty(LOG_KEY, oldProp);
|
||||
<a class="jxr_linenumber" name="L136" href="#L136">136</a> }
|
||||
<a class="jxr_linenumber" name="L137" href="#L137">137</a> }
|
||||
<a class="jxr_linenumber" name="L138" href="#L138">138</a>
|
||||
<a class="jxr_linenumber" name="L139" href="#L139">139</a> <em class="jxr_comment">//This test doesn't work on Windows.</em>
|
||||
<a class="jxr_linenumber" name="L140" href="#L140">140</a> assumeFalse(System.getProperty(<span class="jxr_string">"os.name"</span>).startsWith(<span class="jxr_string">"Windows"</span>));
|
||||
<a class="jxr_linenumber" name="L139" href="#L139">139</a> @Test
|
||||
<a class="jxr_linenumber" name="L140" href="#L140">140</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testWithSettingMono() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L141" href="#L141">141</a>
|
||||
<a class="jxr_linenumber" name="L142" href="#L142">142</a> String oldValue = Settings.getString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
|
||||
<a class="jxr_linenumber" name="L143" href="#L143">143</a> <em class="jxr_comment">// if oldValue is null, that means that neither the system property nor the setting has</em>
|
||||
<a class="jxr_linenumber" name="L144" href="#L144">144</a> <em class="jxr_comment">// been set. If that's the case, then we have to make it such that when we recover,</em>
|
||||
<a class="jxr_linenumber" name="L145" href="#L145">145</a> <em class="jxr_comment">// null still comes back. But you can't put a null value in a HashMap, so we have to set</em>
|
||||
<a class="jxr_linenumber" name="L146" href="#L146">146</a> <em class="jxr_comment">// the system property rather than the setting.</em>
|
||||
<a class="jxr_linenumber" name="L147" href="#L147">147</a> <strong class="jxr_keyword">if</strong> (oldValue == <strong class="jxr_keyword">null</strong>) {
|
||||
<a class="jxr_linenumber" name="L148" href="#L148">148</a> System.setProperty(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, <span class="jxr_string">"/yooser/bine/mono"</span>);
|
||||
<a class="jxr_linenumber" name="L149" href="#L149">149</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L150" href="#L150">150</a> Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, <span class="jxr_string">"/yooser/bine/mono"</span>);
|
||||
<a class="jxr_linenumber" name="L151" href="#L151">151</a> }
|
||||
<a class="jxr_linenumber" name="L152" href="#L152">152</a>
|
||||
<a class="jxr_linenumber" name="L153" href="#L153">153</a> String oldProp = System.getProperty(LOG_KEY, <span class="jxr_string">"info"</span>);
|
||||
<a class="jxr_linenumber" name="L154" href="#L154">154</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L155" href="#L155">155</a> <em class="jxr_comment">// Tweak the logging to swallow the warning when testing</em>
|
||||
<a class="jxr_linenumber" name="L156" href="#L156">156</a> System.setProperty(LOG_KEY, <span class="jxr_string">"error"</span>);
|
||||
<a class="jxr_linenumber" name="L157" href="#L157">157</a> <em class="jxr_comment">// Have to make a NEW analyzer because during setUp, it would have gotten the correct one</em>
|
||||
<a class="jxr_linenumber" name="L158" href="#L158">158</a> AssemblyAnalyzer aanalyzer = <strong class="jxr_keyword">new</strong> AssemblyAnalyzer();
|
||||
<a class="jxr_linenumber" name="L159" href="#L159">159</a> aanalyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"test.dll"</span>)); <em class="jxr_comment">// trick into "thinking it is active"</em>
|
||||
<a class="jxr_linenumber" name="L160" href="#L160">160</a> aanalyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L161" href="#L161">161</a> fail(<span class="jxr_string">"Expected an InitializationException"</span>);
|
||||
<a class="jxr_linenumber" name="L162" href="#L162">162</a> } <strong class="jxr_keyword">catch</strong> (InitializationException ae) {
|
||||
<a class="jxr_linenumber" name="L163" href="#L163">163</a> assertEquals(<span class="jxr_string">"An error occurred with the .NET AssemblyAnalyzer"</span>, ae.getMessage());
|
||||
<a class="jxr_linenumber" name="L164" href="#L164">164</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L165" href="#L165">165</a> System.setProperty(LOG_KEY, oldProp);
|
||||
<a class="jxr_linenumber" name="L166" href="#L166">166</a> <em class="jxr_comment">// Recover the logger</em>
|
||||
<a class="jxr_linenumber" name="L167" href="#L167">167</a> <em class="jxr_comment">// Now recover the way we came in. If we had to set a System property, delete it. Otherwise,</em>
|
||||
<a class="jxr_linenumber" name="L168" href="#L168">168</a> <em class="jxr_comment">// reset the old value</em>
|
||||
<a class="jxr_linenumber" name="L169" href="#L169">169</a> <strong class="jxr_keyword">if</strong> (oldValue == <strong class="jxr_keyword">null</strong>) {
|
||||
<a class="jxr_linenumber" name="L170" href="#L170">170</a> System.getProperties().remove(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
|
||||
<a class="jxr_linenumber" name="L171" href="#L171">171</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L172" href="#L172">172</a> Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, oldValue);
|
||||
<a class="jxr_linenumber" name="L173" href="#L173">173</a> }
|
||||
<a class="jxr_linenumber" name="L174" href="#L174">174</a> }
|
||||
<a class="jxr_linenumber" name="L175" href="#L175">175</a> }
|
||||
<a class="jxr_linenumber" name="L176" href="#L176">176</a>
|
||||
<a class="jxr_linenumber" name="L177" href="#L177">177</a> @After
|
||||
<a class="jxr_linenumber" name="L178" href="#L178">178</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> tearDown() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L179" href="#L179">179</a> analyzer.close();
|
||||
<a class="jxr_linenumber" name="L180" href="#L180">180</a> }
|
||||
<a class="jxr_linenumber" name="L181" href="#L181">181</a> }
|
||||
<a class="jxr_linenumber" name="L142" href="#L142">142</a> <em class="jxr_comment">//This test doesn't work on Windows.</em>
|
||||
<a class="jxr_linenumber" name="L143" href="#L143">143</a> assumeFalse(System.getProperty(<span class="jxr_string">"os.name"</span>).startsWith(<span class="jxr_string">"Windows"</span>));
|
||||
<a class="jxr_linenumber" name="L144" href="#L144">144</a>
|
||||
<a class="jxr_linenumber" name="L145" href="#L145">145</a> String oldValue = Settings.getString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
|
||||
<a class="jxr_linenumber" name="L146" href="#L146">146</a> <em class="jxr_comment">// if oldValue is null, that means that neither the system property nor the setting has</em>
|
||||
<a class="jxr_linenumber" name="L147" href="#L147">147</a> <em class="jxr_comment">// been set. If that's the case, then we have to make it such that when we recover,</em>
|
||||
<a class="jxr_linenumber" name="L148" href="#L148">148</a> <em class="jxr_comment">// null still comes back. But you can't put a null value in a HashMap, so we have to set</em>
|
||||
<a class="jxr_linenumber" name="L149" href="#L149">149</a> <em class="jxr_comment">// the system property rather than the setting.</em>
|
||||
<a class="jxr_linenumber" name="L150" href="#L150">150</a> <strong class="jxr_keyword">if</strong> (oldValue == <strong class="jxr_keyword">null</strong>) {
|
||||
<a class="jxr_linenumber" name="L151" href="#L151">151</a> System.setProperty(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, <span class="jxr_string">"/yooser/bine/mono"</span>);
|
||||
<a class="jxr_linenumber" name="L152" href="#L152">152</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L153" href="#L153">153</a> Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, <span class="jxr_string">"/yooser/bine/mono"</span>);
|
||||
<a class="jxr_linenumber" name="L154" href="#L154">154</a> }
|
||||
<a class="jxr_linenumber" name="L155" href="#L155">155</a>
|
||||
<a class="jxr_linenumber" name="L156" href="#L156">156</a> String oldProp = System.getProperty(LOG_KEY, <span class="jxr_string">"info"</span>);
|
||||
<a class="jxr_linenumber" name="L157" href="#L157">157</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L158" href="#L158">158</a> <em class="jxr_comment">// Tweak the logging to swallow the warning when testing</em>
|
||||
<a class="jxr_linenumber" name="L159" href="#L159">159</a> System.setProperty(LOG_KEY, <span class="jxr_string">"error"</span>);
|
||||
<a class="jxr_linenumber" name="L160" href="#L160">160</a> <em class="jxr_comment">// Have to make a NEW analyzer because during setUp, it would have gotten the correct one</em>
|
||||
<a class="jxr_linenumber" name="L161" href="#L161">161</a> AssemblyAnalyzer aanalyzer = <strong class="jxr_keyword">new</strong> AssemblyAnalyzer();
|
||||
<a class="jxr_linenumber" name="L162" href="#L162">162</a> aanalyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"test.dll"</span>)); <em class="jxr_comment">// trick into "thinking it is active"</em>
|
||||
<a class="jxr_linenumber" name="L163" href="#L163">163</a> aanalyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L164" href="#L164">164</a> fail(<span class="jxr_string">"Expected an InitializationException"</span>);
|
||||
<a class="jxr_linenumber" name="L165" href="#L165">165</a> } <strong class="jxr_keyword">catch</strong> (InitializationException ae) {
|
||||
<a class="jxr_linenumber" name="L166" href="#L166">166</a> assertEquals(<span class="jxr_string">"An error occurred with the .NET AssemblyAnalyzer"</span>, ae.getMessage());
|
||||
<a class="jxr_linenumber" name="L167" href="#L167">167</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L168" href="#L168">168</a> System.setProperty(LOG_KEY, oldProp);
|
||||
<a class="jxr_linenumber" name="L169" href="#L169">169</a> <em class="jxr_comment">// Recover the logger</em>
|
||||
<a class="jxr_linenumber" name="L170" href="#L170">170</a> <em class="jxr_comment">// Now recover the way we came in. If we had to set a System property, delete it. Otherwise,</em>
|
||||
<a class="jxr_linenumber" name="L171" href="#L171">171</a> <em class="jxr_comment">// reset the old value</em>
|
||||
<a class="jxr_linenumber" name="L172" href="#L172">172</a> <strong class="jxr_keyword">if</strong> (oldValue == <strong class="jxr_keyword">null</strong>) {
|
||||
<a class="jxr_linenumber" name="L173" href="#L173">173</a> System.getProperties().remove(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH);
|
||||
<a class="jxr_linenumber" name="L174" href="#L174">174</a> } <strong class="jxr_keyword">else</strong> {
|
||||
<a class="jxr_linenumber" name="L175" href="#L175">175</a> Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, oldValue);
|
||||
<a class="jxr_linenumber" name="L176" href="#L176">176</a> }
|
||||
<a class="jxr_linenumber" name="L177" href="#L177">177</a> }
|
||||
<a class="jxr_linenumber" name="L178" href="#L178">178</a> }
|
||||
<a class="jxr_linenumber" name="L179" href="#L179">179</a>
|
||||
<a class="jxr_linenumber" name="L180" href="#L180">180</a> @After
|
||||
<a class="jxr_linenumber" name="L181" href="#L181">181</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> tearDown() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L182" href="#L182">182</a> analyzer.close();
|
||||
<a class="jxr_linenumber" name="L183" href="#L183">183</a> }
|
||||
<a class="jxr_linenumber" name="L184" href="#L184">184</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -197,84 +197,85 @@
|
||||
<a class="jxr_linenumber" name="L189" href="#L189">189</a> instance.determineCPE(spring);
|
||||
<a class="jxr_linenumber" name="L190" href="#L190">190</a> instance.determineCPE(spring3);
|
||||
<a class="jxr_linenumber" name="L191" href="#L191">191</a> instance.close();
|
||||
<a class="jxr_linenumber" name="L192" href="#L192">192</a>
|
||||
<a class="jxr_linenumber" name="L193" href="#L193">193</a> String expResult = <span class="jxr_string">"cpe:/a:apache:struts:2.1.2"</span>;
|
||||
<a class="jxr_linenumber" name="L194" href="#L194">194</a> Identifier expIdentifier = <strong class="jxr_keyword">new</strong> Identifier(<span class="jxr_string">"cpe"</span>, expResult, expResult);
|
||||
<a class="jxr_linenumber" name="L195" href="#L195">195</a> String expResultSpring = <span class="jxr_string">"cpe:/a:springsource:spring_framework:2.5.5"</span>;
|
||||
<a class="jxr_linenumber" name="L196" href="#L196">196</a> String expResultSpring3 = <span class="jxr_string">"cpe:/a:vmware:springsource_spring_framework:3.0.0"</span>;
|
||||
<a class="jxr_linenumber" name="L197" href="#L197">197</a>
|
||||
<a class="jxr_linenumber" name="L198" href="#L198">198</a> <strong class="jxr_keyword">for</strong> (Identifier i : commonValidator.getIdentifiers()) {
|
||||
<a class="jxr_linenumber" name="L199" href="#L199">199</a> Assert.assertFalse(<span class="jxr_string">"Apache Common Validator - found a CPE identifier?"</span>, <span class="jxr_string">"cpe"</span>.equals(i.getType()));
|
||||
<a class="jxr_linenumber" name="L200" href="#L200">200</a> }
|
||||
<a class="jxr_linenumber" name="L201" href="#L201">201</a>
|
||||
<a class="jxr_linenumber" name="L202" href="#L202">202</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match size - struts"</span>, struts.getIdentifiers().size() >= 1);
|
||||
<a class="jxr_linenumber" name="L203" href="#L203">203</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match - struts"</span>, struts.getIdentifiers().contains(expIdentifier));
|
||||
<a class="jxr_linenumber" name="L204" href="#L204">204</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match size - spring3 - "</span> + spring3.getIdentifiers().size(), spring3.getIdentifiers().size() >= 1);
|
||||
<a class="jxr_linenumber" name="L205" href="#L205">205</a>
|
||||
<a class="jxr_linenumber" name="L206" href="#L206">206</a> <em class="jxr_comment">//the following two only work if the HintAnalyzer is used.</em>
|
||||
<a class="jxr_linenumber" name="L207" href="#L207">207</a> <em class="jxr_comment">//Assert.assertTrue("Incorrect match size - spring", spring.getIdentifiers().size() == 1);</em>
|
||||
<a class="jxr_linenumber" name="L208" href="#L208">208</a> <em class="jxr_comment">//Assert.assertTrue("Incorrect match - spring", spring.getIdentifiers().get(0).getValue().equals(expResultSpring));</em>
|
||||
<a class="jxr_linenumber" name="L209" href="#L209">209</a> jarAnalyzer.close();
|
||||
<a class="jxr_linenumber" name="L210" href="#L210">210</a> }
|
||||
<a class="jxr_linenumber" name="L211" href="#L211">211</a>
|
||||
<a class="jxr_linenumber" name="L212" href="#L212">212</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L213" href="#L213">213</a> <em class="jxr_javadoccomment"> * Test of determineIdentifiers method, of class CPEAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L214" href="#L214">214</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L215" href="#L215">215</a> <em class="jxr_javadoccomment"> * @throws Exception is thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L216" href="#L216">216</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L217" href="#L217">217</a> @Test
|
||||
<a class="jxr_linenumber" name="L218" href="#L218">218</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testDetermineIdentifiers() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L219" href="#L219">219</a> Dependency openssl = <strong class="jxr_keyword">new</strong> Dependency();
|
||||
<a class="jxr_linenumber" name="L220" href="#L220">220</a> openssl.getVendorEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"vendor"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L221" href="#L221">221</a> openssl.getProductEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"product"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L222" href="#L222">222</a> openssl.getVersionEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"version"</span>, <span class="jxr_string">"1.0.1c"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L223" href="#L223">223</a>
|
||||
<a class="jxr_linenumber" name="L224" href="#L224">224</a> CPEAnalyzer instance = <strong class="jxr_keyword">new</strong> CPEAnalyzer();
|
||||
<a class="jxr_linenumber" name="L225" href="#L225">225</a> instance.open();
|
||||
<a class="jxr_linenumber" name="L226" href="#L226">226</a> instance.determineIdentifiers(openssl, <span class="jxr_string">"openssl"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L227" href="#L227">227</a> instance.close();
|
||||
<a class="jxr_linenumber" name="L228" href="#L228">228</a>
|
||||
<a class="jxr_linenumber" name="L229" href="#L229">229</a> String expResult = <span class="jxr_string">"cpe:/a:openssl:openssl:1.0.1c"</span>;
|
||||
<a class="jxr_linenumber" name="L230" href="#L230">230</a> Identifier expIdentifier = <strong class="jxr_keyword">new</strong> Identifier(<span class="jxr_string">"cpe"</span>, expResult, expResult);
|
||||
<a class="jxr_linenumber" name="L231" href="#L231">231</a>
|
||||
<a class="jxr_linenumber" name="L232" href="#L232">232</a> assertTrue(openssl.getIdentifiers().contains(expIdentifier));
|
||||
<a class="jxr_linenumber" name="L233" href="#L233">233</a>
|
||||
<a class="jxr_linenumber" name="L234" href="#L234">234</a> }
|
||||
<a class="jxr_linenumber" name="L235" href="#L235">235</a>
|
||||
<a class="jxr_linenumber" name="L236" href="#L236">236</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L237" href="#L237">237</a> <em class="jxr_javadoccomment"> * Test of searchCPE method, of class CPEAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L238" href="#L238">238</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L239" href="#L239">239</a> <em class="jxr_javadoccomment"> * @throws Exception is thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L240" href="#L240">240</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L241" href="#L241">241</a> @Test
|
||||
<a class="jxr_linenumber" name="L242" href="#L242">242</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testSearchCPE() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L243" href="#L243">243</a> String vendor = <span class="jxr_string">"apache software foundation"</span>;
|
||||
<a class="jxr_linenumber" name="L244" href="#L244">244</a> String product = <span class="jxr_string">"struts 2 core"</span>;
|
||||
<a class="jxr_linenumber" name="L245" href="#L245">245</a> String version = <span class="jxr_string">"2.1.2"</span>;
|
||||
<a class="jxr_linenumber" name="L246" href="#L246">246</a> String expVendor = <span class="jxr_string">"apache"</span>;
|
||||
<a class="jxr_linenumber" name="L247" href="#L247">247</a> String expProduct = <span class="jxr_string">"struts"</span>;
|
||||
<a class="jxr_linenumber" name="L248" href="#L248">248</a>
|
||||
<a class="jxr_linenumber" name="L249" href="#L249">249</a> CPEAnalyzer instance = <strong class="jxr_keyword">new</strong> CPEAnalyzer();
|
||||
<a class="jxr_linenumber" name="L250" href="#L250">250</a> instance.open();
|
||||
<a class="jxr_linenumber" name="L251" href="#L251">251</a>
|
||||
<a class="jxr_linenumber" name="L252" href="#L252">252</a> Set<String> productWeightings = Collections.singleton(<span class="jxr_string">"struts2"</span>);
|
||||
<a class="jxr_linenumber" name="L253" href="#L253">253</a>
|
||||
<a class="jxr_linenumber" name="L254" href="#L254">254</a> Set<String> vendorWeightings = Collections.singleton(<span class="jxr_string">"apache"</span>);
|
||||
<a class="jxr_linenumber" name="L255" href="#L255">255</a>
|
||||
<a class="jxr_linenumber" name="L256" href="#L256">256</a> List<IndexEntry> result = instance.searchCPE(vendor, product, vendorWeightings, productWeightings);
|
||||
<a class="jxr_linenumber" name="L257" href="#L257">257</a> instance.close();
|
||||
<a class="jxr_linenumber" name="L258" href="#L258">258</a>
|
||||
<a class="jxr_linenumber" name="L259" href="#L259">259</a> <strong class="jxr_keyword">boolean</strong> found = false;
|
||||
<a class="jxr_linenumber" name="L260" href="#L260">260</a> <strong class="jxr_keyword">for</strong> (IndexEntry entry : result) {
|
||||
<a class="jxr_linenumber" name="L261" href="#L261">261</a> <strong class="jxr_keyword">if</strong> (expVendor.equals(entry.getVendor()) && expProduct.equals(entry.getProduct())) {
|
||||
<a class="jxr_linenumber" name="L262" href="#L262">262</a> found = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L263" href="#L263">263</a> <strong class="jxr_keyword">break</strong>;
|
||||
<a class="jxr_linenumber" name="L264" href="#L264">264</a> }
|
||||
<a class="jxr_linenumber" name="L265" href="#L265">265</a> }
|
||||
<a class="jxr_linenumber" name="L266" href="#L266">266</a> assertTrue(<span class="jxr_string">"apache:struts was not identified"</span>, found);
|
||||
<a class="jxr_linenumber" name="L267" href="#L267">267</a>
|
||||
<a class="jxr_linenumber" name="L268" href="#L268">268</a> }
|
||||
<a class="jxr_linenumber" name="L269" href="#L269">269</a> }
|
||||
<a class="jxr_linenumber" name="L192" href="#L192">192</a>
|
||||
<a class="jxr_linenumber" name="L193" href="#L193">193</a>
|
||||
<a class="jxr_linenumber" name="L194" href="#L194">194</a> String expResult = <span class="jxr_string">"cpe:/a:apache:struts:2.1.2"</span>;
|
||||
<a class="jxr_linenumber" name="L195" href="#L195">195</a> Identifier expIdentifier = <strong class="jxr_keyword">new</strong> Identifier(<span class="jxr_string">"cpe"</span>, expResult, expResult);
|
||||
<a class="jxr_linenumber" name="L196" href="#L196">196</a> String expResultSpring = <span class="jxr_string">"cpe:/a:springsource:spring_framework:2.5.5"</span>;
|
||||
<a class="jxr_linenumber" name="L197" href="#L197">197</a> String expResultSpring3 = <span class="jxr_string">"cpe:/a:vmware:springsource_spring_framework:3.0.0"</span>;
|
||||
<a class="jxr_linenumber" name="L198" href="#L198">198</a>
|
||||
<a class="jxr_linenumber" name="L199" href="#L199">199</a> <strong class="jxr_keyword">for</strong> (Identifier i : commonValidator.getIdentifiers()) {
|
||||
<a class="jxr_linenumber" name="L200" href="#L200">200</a> Assert.assertFalse(<span class="jxr_string">"Apache Common Validator - found a CPE identifier?"</span>, <span class="jxr_string">"cpe"</span>.equals(i.getType()));
|
||||
<a class="jxr_linenumber" name="L201" href="#L201">201</a> }
|
||||
<a class="jxr_linenumber" name="L202" href="#L202">202</a>
|
||||
<a class="jxr_linenumber" name="L203" href="#L203">203</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match size - struts"</span>, struts.getIdentifiers().size() >= 1);
|
||||
<a class="jxr_linenumber" name="L204" href="#L204">204</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match - struts"</span>, struts.getIdentifiers().contains(expIdentifier));
|
||||
<a class="jxr_linenumber" name="L205" href="#L205">205</a> Assert.assertTrue(<span class="jxr_string">"Incorrect match size - spring3 - "</span> + spring3.getIdentifiers().size(), spring3.getIdentifiers().size() >= 1);
|
||||
<a class="jxr_linenumber" name="L206" href="#L206">206</a>
|
||||
<a class="jxr_linenumber" name="L207" href="#L207">207</a> <em class="jxr_comment">//the following two only work if the HintAnalyzer is used.</em>
|
||||
<a class="jxr_linenumber" name="L208" href="#L208">208</a> <em class="jxr_comment">//Assert.assertTrue("Incorrect match size - spring", spring.getIdentifiers().size() == 1);</em>
|
||||
<a class="jxr_linenumber" name="L209" href="#L209">209</a> <em class="jxr_comment">//Assert.assertTrue("Incorrect match - spring", spring.getIdentifiers().get(0).getValue().equals(expResultSpring));</em>
|
||||
<a class="jxr_linenumber" name="L210" href="#L210">210</a> jarAnalyzer.close();
|
||||
<a class="jxr_linenumber" name="L211" href="#L211">211</a> }
|
||||
<a class="jxr_linenumber" name="L212" href="#L212">212</a>
|
||||
<a class="jxr_linenumber" name="L213" href="#L213">213</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L214" href="#L214">214</a> <em class="jxr_javadoccomment"> * Test of determineIdentifiers method, of class CPEAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L215" href="#L215">215</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L216" href="#L216">216</a> <em class="jxr_javadoccomment"> * @throws Exception is thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L217" href="#L217">217</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L218" href="#L218">218</a> @Test
|
||||
<a class="jxr_linenumber" name="L219" href="#L219">219</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testDetermineIdentifiers() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L220" href="#L220">220</a> Dependency openssl = <strong class="jxr_keyword">new</strong> Dependency();
|
||||
<a class="jxr_linenumber" name="L221" href="#L221">221</a> openssl.getVendorEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"vendor"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L222" href="#L222">222</a> openssl.getProductEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"product"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L223" href="#L223">223</a> openssl.getVersionEvidence().addEvidence(<span class="jxr_string">"test"</span>, <span class="jxr_string">"version"</span>, <span class="jxr_string">"1.0.1c"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L224" href="#L224">224</a>
|
||||
<a class="jxr_linenumber" name="L225" href="#L225">225</a> CPEAnalyzer instance = <strong class="jxr_keyword">new</strong> CPEAnalyzer();
|
||||
<a class="jxr_linenumber" name="L226" href="#L226">226</a> instance.open();
|
||||
<a class="jxr_linenumber" name="L227" href="#L227">227</a> instance.determineIdentifiers(openssl, <span class="jxr_string">"openssl"</span>, <span class="jxr_string">"openssl"</span>, Confidence.HIGHEST);
|
||||
<a class="jxr_linenumber" name="L228" href="#L228">228</a> instance.close();
|
||||
<a class="jxr_linenumber" name="L229" href="#L229">229</a>
|
||||
<a class="jxr_linenumber" name="L230" href="#L230">230</a> String expResult = <span class="jxr_string">"cpe:/a:openssl:openssl:1.0.1c"</span>;
|
||||
<a class="jxr_linenumber" name="L231" href="#L231">231</a> Identifier expIdentifier = <strong class="jxr_keyword">new</strong> Identifier(<span class="jxr_string">"cpe"</span>, expResult, expResult);
|
||||
<a class="jxr_linenumber" name="L232" href="#L232">232</a>
|
||||
<a class="jxr_linenumber" name="L233" href="#L233">233</a> assertTrue(openssl.getIdentifiers().contains(expIdentifier));
|
||||
<a class="jxr_linenumber" name="L234" href="#L234">234</a>
|
||||
<a class="jxr_linenumber" name="L235" href="#L235">235</a> }
|
||||
<a class="jxr_linenumber" name="L236" href="#L236">236</a>
|
||||
<a class="jxr_linenumber" name="L237" href="#L237">237</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L238" href="#L238">238</a> <em class="jxr_javadoccomment"> * Test of searchCPE method, of class CPEAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L239" href="#L239">239</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L240" href="#L240">240</a> <em class="jxr_javadoccomment"> * @throws Exception is thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L241" href="#L241">241</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L242" href="#L242">242</a> @Test
|
||||
<a class="jxr_linenumber" name="L243" href="#L243">243</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testSearchCPE() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L244" href="#L244">244</a> String vendor = <span class="jxr_string">"apache software foundation"</span>;
|
||||
<a class="jxr_linenumber" name="L245" href="#L245">245</a> String product = <span class="jxr_string">"struts 2 core"</span>;
|
||||
<a class="jxr_linenumber" name="L246" href="#L246">246</a> String version = <span class="jxr_string">"2.1.2"</span>;
|
||||
<a class="jxr_linenumber" name="L247" href="#L247">247</a> String expVendor = <span class="jxr_string">"apache"</span>;
|
||||
<a class="jxr_linenumber" name="L248" href="#L248">248</a> String expProduct = <span class="jxr_string">"struts"</span>;
|
||||
<a class="jxr_linenumber" name="L249" href="#L249">249</a>
|
||||
<a class="jxr_linenumber" name="L250" href="#L250">250</a> CPEAnalyzer instance = <strong class="jxr_keyword">new</strong> CPEAnalyzer();
|
||||
<a class="jxr_linenumber" name="L251" href="#L251">251</a> instance.open();
|
||||
<a class="jxr_linenumber" name="L252" href="#L252">252</a>
|
||||
<a class="jxr_linenumber" name="L253" href="#L253">253</a> Set<String> productWeightings = Collections.singleton(<span class="jxr_string">"struts2"</span>);
|
||||
<a class="jxr_linenumber" name="L254" href="#L254">254</a>
|
||||
<a class="jxr_linenumber" name="L255" href="#L255">255</a> Set<String> vendorWeightings = Collections.singleton(<span class="jxr_string">"apache"</span>);
|
||||
<a class="jxr_linenumber" name="L256" href="#L256">256</a>
|
||||
<a class="jxr_linenumber" name="L257" href="#L257">257</a> List<IndexEntry> result = instance.searchCPE(vendor, product, vendorWeightings, productWeightings);
|
||||
<a class="jxr_linenumber" name="L258" href="#L258">258</a> instance.close();
|
||||
<a class="jxr_linenumber" name="L259" href="#L259">259</a>
|
||||
<a class="jxr_linenumber" name="L260" href="#L260">260</a> <strong class="jxr_keyword">boolean</strong> found = false;
|
||||
<a class="jxr_linenumber" name="L261" href="#L261">261</a> <strong class="jxr_keyword">for</strong> (IndexEntry entry : result) {
|
||||
<a class="jxr_linenumber" name="L262" href="#L262">262</a> <strong class="jxr_keyword">if</strong> (expVendor.equals(entry.getVendor()) && expProduct.equals(entry.getProduct())) {
|
||||
<a class="jxr_linenumber" name="L263" href="#L263">263</a> found = <strong class="jxr_keyword">true</strong>;
|
||||
<a class="jxr_linenumber" name="L264" href="#L264">264</a> <strong class="jxr_keyword">break</strong>;
|
||||
<a class="jxr_linenumber" name="L265" href="#L265">265</a> }
|
||||
<a class="jxr_linenumber" name="L266" href="#L266">266</a> }
|
||||
<a class="jxr_linenumber" name="L267" href="#L267">267</a> assertTrue(<span class="jxr_string">"apache:struts was not identified"</span>, found);
|
||||
<a class="jxr_linenumber" name="L268" href="#L268">268</a>
|
||||
<a class="jxr_linenumber" name="L269" href="#L269">269</a> }
|
||||
<a class="jxr_linenumber" name="L270" href="#L270">270</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -125,118 +125,117 @@
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
|
||||
<a class="jxr_linenumber" name="L118" href="#L118">118</a> analyzer.analyze(result, engine);
|
||||
<a class="jxr_linenumber" name="L119" href="#L119">119</a> <strong class="jxr_keyword">int</strong> size = engine.getDependencies().size();
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a>
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a> assertTrue(size >= 1);
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a>
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> Dependency dependency = engine.getDependencies().get(0);
|
||||
<a class="jxr_linenumber" name="L124" href="#L124">124</a> assertTrue(dependency.getProductEvidence().toString().toLowerCase().contains(<span class="jxr_string">"redcarpet"</span>));
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a> assertTrue(dependency.getVersionEvidence().toString().toLowerCase().contains(<span class="jxr_string">"2.2.2"</span>));
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> assertTrue(dependency.getFilePath().endsWith(resource));
|
||||
<a class="jxr_linenumber" name="L127" href="#L127">127</a> assertTrue(dependency.getFileName().equals(<span class="jxr_string">"Gemfile.lock"</span>));
|
||||
<a class="jxr_linenumber" name="L128" href="#L128">128</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L129" href="#L129">129</a> LOGGER.warn(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer. Make sure Ruby gem bundle-audit is installed. You may also need to set property \"analyzer.bundle.audit.path\"."</span>);
|
||||
<a class="jxr_linenumber" name="L130" href="#L130">130</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, e);
|
||||
<a class="jxr_linenumber" name="L131" href="#L131">131</a> }
|
||||
<a class="jxr_linenumber" name="L132" href="#L132">132</a> }
|
||||
<a class="jxr_linenumber" name="L133" href="#L133">133</a>
|
||||
<a class="jxr_linenumber" name="L134" href="#L134">134</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L135" href="#L135">135</a> <em class="jxr_javadoccomment"> * Test Ruby addCriticalityToVulnerability</em>
|
||||
<a class="jxr_linenumber" name="L136" href="#L136">136</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L137" href="#L137">137</a> @Test
|
||||
<a class="jxr_linenumber" name="L138" href="#L138">138</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testAddCriticalityToVulnerability() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L139" href="#L139">139</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L140" href="#L140">140</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L141" href="#L141">141</a>
|
||||
<a class="jxr_linenumber" name="L142" href="#L142">142</a> <strong class="jxr_keyword">final</strong> Dependency result = <strong class="jxr_keyword">new</strong> Dependency(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L143" href="#L143">143</a> <span class="jxr_string">"ruby/vulnerable/gems/sinatra/Gemfile.lock"</span>));
|
||||
<a class="jxr_linenumber" name="L144" href="#L144">144</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
|
||||
<a class="jxr_linenumber" name="L145" href="#L145">145</a> analyzer.analyze(result, engine);
|
||||
<a class="jxr_linenumber" name="L146" href="#L146">146</a>
|
||||
<a class="jxr_linenumber" name="L147" href="#L147">147</a> Dependency dependency = engine.getDependencies().get(0);
|
||||
<a class="jxr_linenumber" name="L148" href="#L148">148</a> Vulnerability vulnerability = dependency.getVulnerabilities().first();
|
||||
<a class="jxr_linenumber" name="L149" href="#L149">149</a> assertEquals(vulnerability.getCvssScore(), 5.0f, 0.0);
|
||||
<a class="jxr_linenumber" name="L150" href="#L150">150</a>
|
||||
<a class="jxr_linenumber" name="L151" href="#L151">151</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L152" href="#L152">152</a> LOGGER.warn(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer. Make sure Ruby gem bundle-audit is installed. You may also need to set property \"analyzer.bundle.audit.path\"."</span>);
|
||||
<a class="jxr_linenumber" name="L153" href="#L153">153</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, e);
|
||||
<a class="jxr_linenumber" name="L154" href="#L154">154</a> }
|
||||
<a class="jxr_linenumber" name="L155" href="#L155">155</a> }
|
||||
<a class="jxr_linenumber" name="L156" href="#L156">156</a>
|
||||
<a class="jxr_linenumber" name="L157" href="#L157">157</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L158" href="#L158">158</a> <em class="jxr_javadoccomment"> * Test when Ruby bundle-audit is not available on the system.</em>
|
||||
<a class="jxr_linenumber" name="L159" href="#L159">159</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L160" href="#L160">160</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L161" href="#L161">161</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L162" href="#L162">162</a> @Test
|
||||
<a class="jxr_linenumber" name="L163" href="#L163">163</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testMissingBundleAudit() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L164" href="#L164">164</a> <em class="jxr_comment">//set a non-exist bundle-audit</em>
|
||||
<a class="jxr_linenumber" name="L165" href="#L165">165</a> Settings.setString(Settings.KEYS.ANALYZER_BUNDLE_AUDIT_PATH, <span class="jxr_string">"phantom-bundle-audit"</span>);
|
||||
<a class="jxr_linenumber" name="L166" href="#L166">166</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L167" href="#L167">167</a> <em class="jxr_comment">//initialize should fail.</em>
|
||||
<a class="jxr_linenumber" name="L168" href="#L168">168</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L169" href="#L169">169</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L170" href="#L170">170</a> <em class="jxr_comment">//expected, so ignore.</em>
|
||||
<a class="jxr_linenumber" name="L171" href="#L171">171</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L172" href="#L172">172</a> assertThat(analyzer.isEnabled(), is(false));
|
||||
<a class="jxr_linenumber" name="L173" href="#L173">173</a> LOGGER.info(<span class="jxr_string">"phantom-bundle-audit is not available. Ruby Bundle Audit Analyzer is disabled as expected."</span>);
|
||||
<a class="jxr_linenumber" name="L174" href="#L174">174</a> }
|
||||
<a class="jxr_linenumber" name="L175" href="#L175">175</a> }
|
||||
<a class="jxr_linenumber" name="L176" href="#L176">176</a>
|
||||
<a class="jxr_linenumber" name="L177" href="#L177">177</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L178" href="#L178">178</a> <em class="jxr_javadoccomment"> * Test Ruby dependencies and their paths.</em>
|
||||
<a class="jxr_linenumber" name="L179" href="#L179">179</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L180" href="#L180">180</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L181" href="#L181">181</a> <em class="jxr_javadoccomment"> * @throws DatabaseException thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L182" href="#L182">182</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L183" href="#L183">183</a> @Test
|
||||
<a class="jxr_linenumber" name="L184" href="#L184">184</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testDependenciesPath() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L185" href="#L185">185</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
|
||||
<a class="jxr_linenumber" name="L186" href="#L186">186</a> engine.scan(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L187" href="#L187">187</a> <span class="jxr_string">"ruby/vulnerable/gems/rails-4.1.15/"</span>));
|
||||
<a class="jxr_linenumber" name="L188" href="#L188">188</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L189" href="#L189">189</a> engine.analyzeDependencies();
|
||||
<a class="jxr_linenumber" name="L190" href="#L190">190</a> } <strong class="jxr_keyword">catch</strong> (NullPointerException ex) {
|
||||
<a class="jxr_linenumber" name="L191" href="#L191">191</a> LOGGER.error(<span class="jxr_string">"NPE"</span>, ex);
|
||||
<a class="jxr_linenumber" name="L192" href="#L192">192</a> <strong class="jxr_keyword">throw</strong> ex;
|
||||
<a class="jxr_linenumber" name="L193" href="#L193">193</a> } <strong class="jxr_keyword">catch</strong> (ExceptionCollection ex) {
|
||||
<a class="jxr_linenumber" name="L194" href="#L194">194</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, ex);
|
||||
<a class="jxr_linenumber" name="L195" href="#L195">195</a> }
|
||||
<a class="jxr_linenumber" name="L196" href="#L196">196</a> List<Dependency> dependencies = engine.getDependencies();
|
||||
<a class="jxr_linenumber" name="L197" href="#L197">197</a> LOGGER.info(dependencies.size() + <span class="jxr_string">" dependencies found."</span>);
|
||||
<a class="jxr_linenumber" name="L198" href="#L198">198</a> Iterator<Dependency> dIterator = dependencies.iterator();
|
||||
<a class="jxr_linenumber" name="L199" href="#L199">199</a> <strong class="jxr_keyword">while</strong> (dIterator.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L200" href="#L200">200</a> Dependency dept = dIterator.next();
|
||||
<a class="jxr_linenumber" name="L201" href="#L201">201</a> LOGGER.info(<span class="jxr_string">"dept path: "</span> + dept.getActualFilePath());
|
||||
<a class="jxr_linenumber" name="L202" href="#L202">202</a>
|
||||
<a class="jxr_linenumber" name="L203" href="#L203">203</a> Set<Identifier> identifiers = dept.getIdentifiers();
|
||||
<a class="jxr_linenumber" name="L204" href="#L204">204</a> Iterator<Identifier> idIterator = identifiers.iterator();
|
||||
<a class="jxr_linenumber" name="L205" href="#L205">205</a> <strong class="jxr_keyword">while</strong> (idIterator.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L206" href="#L206">206</a> Identifier id = idIterator.next();
|
||||
<a class="jxr_linenumber" name="L207" href="#L207">207</a> LOGGER.info(<span class="jxr_string">" Identifier: "</span> + id.getValue() + <span class="jxr_string">", type="</span> + id.getType() + <span class="jxr_string">", url="</span> + id.getUrl() + <span class="jxr_string">", conf="</span> + id.getConfidence());
|
||||
<a class="jxr_linenumber" name="L208" href="#L208">208</a> }
|
||||
<a class="jxr_linenumber" name="L209" href="#L209">209</a>
|
||||
<a class="jxr_linenumber" name="L210" href="#L210">210</a> Set<Evidence> prodEv = dept.getProductEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L211" href="#L211">211</a> Iterator<Evidence> it = prodEv.iterator();
|
||||
<a class="jxr_linenumber" name="L212" href="#L212">212</a> <strong class="jxr_keyword">while</strong> (it.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L213" href="#L213">213</a> Evidence e = it.next();
|
||||
<a class="jxr_linenumber" name="L214" href="#L214">214</a> LOGGER.info(<span class="jxr_string">" prod: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L215" href="#L215">215</a> }
|
||||
<a class="jxr_linenumber" name="L216" href="#L216">216</a> Set<Evidence> versionEv = dept.getVersionEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L217" href="#L217">217</a> Iterator<Evidence> vIt = versionEv.iterator();
|
||||
<a class="jxr_linenumber" name="L218" href="#L218">218</a> <strong class="jxr_keyword">while</strong> (vIt.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L219" href="#L219">219</a> Evidence e = vIt.next();
|
||||
<a class="jxr_linenumber" name="L220" href="#L220">220</a> LOGGER.info(<span class="jxr_string">" version: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L221" href="#L221">221</a> }
|
||||
<a class="jxr_linenumber" name="L222" href="#L222">222</a>
|
||||
<a class="jxr_linenumber" name="L223" href="#L223">223</a> Set<Evidence> vendorEv = dept.getVendorEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L224" href="#L224">224</a> Iterator<Evidence> vendorIt = vendorEv.iterator();
|
||||
<a class="jxr_linenumber" name="L225" href="#L225">225</a> <strong class="jxr_keyword">while</strong> (vendorIt.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L226" href="#L226">226</a> Evidence e = vendorIt.next();
|
||||
<a class="jxr_linenumber" name="L227" href="#L227">227</a> LOGGER.info(<span class="jxr_string">" vendor: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L228" href="#L228">228</a> }
|
||||
<a class="jxr_linenumber" name="L229" href="#L229">229</a> }
|
||||
<a class="jxr_linenumber" name="L230" href="#L230">230</a> }
|
||||
<a class="jxr_linenumber" name="L231" href="#L231">231</a> }
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a> assertTrue(size >= 1);
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a>
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a> Dependency dependency = engine.getDependencies().get(0);
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> assertTrue(dependency.getProductEvidence().toString().toLowerCase().contains(<span class="jxr_string">"redcarpet"</span>));
|
||||
<a class="jxr_linenumber" name="L124" href="#L124">124</a> assertTrue(dependency.getVersionEvidence().toString().toLowerCase().contains(<span class="jxr_string">"2.2.2"</span>));
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a> assertTrue(dependency.getFilePath().endsWith(resource));
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> assertTrue(dependency.getFileName().equals(<span class="jxr_string">"Gemfile.lock"</span>));
|
||||
<a class="jxr_linenumber" name="L127" href="#L127">127</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L128" href="#L128">128</a> LOGGER.warn(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer. Make sure Ruby gem bundle-audit is installed. You may also need to set property \"analyzer.bundle.audit.path\"."</span>);
|
||||
<a class="jxr_linenumber" name="L129" href="#L129">129</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, e);
|
||||
<a class="jxr_linenumber" name="L130" href="#L130">130</a> }
|
||||
<a class="jxr_linenumber" name="L131" href="#L131">131</a> }
|
||||
<a class="jxr_linenumber" name="L132" href="#L132">132</a>
|
||||
<a class="jxr_linenumber" name="L133" href="#L133">133</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L134" href="#L134">134</a> <em class="jxr_javadoccomment"> * Test Ruby addCriticalityToVulnerability</em>
|
||||
<a class="jxr_linenumber" name="L135" href="#L135">135</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L136" href="#L136">136</a> @Test
|
||||
<a class="jxr_linenumber" name="L137" href="#L137">137</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testAddCriticalityToVulnerability() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L138" href="#L138">138</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L139" href="#L139">139</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L140" href="#L140">140</a>
|
||||
<a class="jxr_linenumber" name="L141" href="#L141">141</a> <strong class="jxr_keyword">final</strong> Dependency result = <strong class="jxr_keyword">new</strong> Dependency(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L142" href="#L142">142</a> <span class="jxr_string">"ruby/vulnerable/gems/sinatra/Gemfile.lock"</span>));
|
||||
<a class="jxr_linenumber" name="L143" href="#L143">143</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
|
||||
<a class="jxr_linenumber" name="L144" href="#L144">144</a> analyzer.analyze(result, engine);
|
||||
<a class="jxr_linenumber" name="L145" href="#L145">145</a>
|
||||
<a class="jxr_linenumber" name="L146" href="#L146">146</a> Dependency dependency = engine.getDependencies().get(0);
|
||||
<a class="jxr_linenumber" name="L147" href="#L147">147</a> Vulnerability vulnerability = dependency.getVulnerabilities().first();
|
||||
<a class="jxr_linenumber" name="L148" href="#L148">148</a> assertEquals(vulnerability.getCvssScore(), 5.0f, 0.0);
|
||||
<a class="jxr_linenumber" name="L149" href="#L149">149</a>
|
||||
<a class="jxr_linenumber" name="L150" href="#L150">150</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L151" href="#L151">151</a> LOGGER.warn(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer. Make sure Ruby gem bundle-audit is installed. You may also need to set property \"analyzer.bundle.audit.path\"."</span>);
|
||||
<a class="jxr_linenumber" name="L152" href="#L152">152</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, e);
|
||||
<a class="jxr_linenumber" name="L153" href="#L153">153</a> }
|
||||
<a class="jxr_linenumber" name="L154" href="#L154">154</a> }
|
||||
<a class="jxr_linenumber" name="L155" href="#L155">155</a>
|
||||
<a class="jxr_linenumber" name="L156" href="#L156">156</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L157" href="#L157">157</a> <em class="jxr_javadoccomment"> * Test when Ruby bundle-audit is not available on the system.</em>
|
||||
<a class="jxr_linenumber" name="L158" href="#L158">158</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L159" href="#L159">159</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L160" href="#L160">160</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L161" href="#L161">161</a> @Test
|
||||
<a class="jxr_linenumber" name="L162" href="#L162">162</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testMissingBundleAudit() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L163" href="#L163">163</a> <em class="jxr_comment">//set a non-exist bundle-audit</em>
|
||||
<a class="jxr_linenumber" name="L164" href="#L164">164</a> Settings.setString(Settings.KEYS.ANALYZER_BUNDLE_AUDIT_PATH, <span class="jxr_string">"phantom-bundle-audit"</span>);
|
||||
<a class="jxr_linenumber" name="L165" href="#L165">165</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L166" href="#L166">166</a> <em class="jxr_comment">//initialize should fail.</em>
|
||||
<a class="jxr_linenumber" name="L167" href="#L167">167</a> analyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L168" href="#L168">168</a> } <strong class="jxr_keyword">catch</strong> (Exception e) {
|
||||
<a class="jxr_linenumber" name="L169" href="#L169">169</a> <em class="jxr_comment">//expected, so ignore.</em>
|
||||
<a class="jxr_linenumber" name="L170" href="#L170">170</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L171" href="#L171">171</a> assertThat(analyzer.isEnabled(), is(false));
|
||||
<a class="jxr_linenumber" name="L172" href="#L172">172</a> LOGGER.info(<span class="jxr_string">"phantom-bundle-audit is not available. Ruby Bundle Audit Analyzer is disabled as expected."</span>);
|
||||
<a class="jxr_linenumber" name="L173" href="#L173">173</a> }
|
||||
<a class="jxr_linenumber" name="L174" href="#L174">174</a> }
|
||||
<a class="jxr_linenumber" name="L175" href="#L175">175</a>
|
||||
<a class="jxr_linenumber" name="L176" href="#L176">176</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L177" href="#L177">177</a> <em class="jxr_javadoccomment"> * Test Ruby dependencies and their paths.</em>
|
||||
<a class="jxr_linenumber" name="L178" href="#L178">178</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L179" href="#L179">179</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L180" href="#L180">180</a> <em class="jxr_javadoccomment"> * @throws DatabaseException thrown when an exception occurs</em>
|
||||
<a class="jxr_linenumber" name="L181" href="#L181">181</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L182" href="#L182">182</a> @Test
|
||||
<a class="jxr_linenumber" name="L183" href="#L183">183</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testDependenciesPath() <strong class="jxr_keyword">throws</strong> AnalysisException, DatabaseException {
|
||||
<a class="jxr_linenumber" name="L184" href="#L184">184</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
|
||||
<a class="jxr_linenumber" name="L185" href="#L185">185</a> engine.scan(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L186" href="#L186">186</a> <span class="jxr_string">"ruby/vulnerable/gems/rails-4.1.15/"</span>));
|
||||
<a class="jxr_linenumber" name="L187" href="#L187">187</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L188" href="#L188">188</a> engine.analyzeDependencies();
|
||||
<a class="jxr_linenumber" name="L189" href="#L189">189</a> } <strong class="jxr_keyword">catch</strong> (NullPointerException ex) {
|
||||
<a class="jxr_linenumber" name="L190" href="#L190">190</a> LOGGER.error(<span class="jxr_string">"NPE"</span>, ex);
|
||||
<a class="jxr_linenumber" name="L191" href="#L191">191</a> <strong class="jxr_keyword">throw</strong> ex;
|
||||
<a class="jxr_linenumber" name="L192" href="#L192">192</a> } <strong class="jxr_keyword">catch</strong> (ExceptionCollection ex) {
|
||||
<a class="jxr_linenumber" name="L193" href="#L193">193</a> Assume.assumeNoException(<span class="jxr_string">"Exception setting up RubyBundleAuditAnalyzer; bundle audit may not be installed, or property \"analyzer.bundle.audit.path\" may not be set."</span>, ex);
|
||||
<a class="jxr_linenumber" name="L194" href="#L194">194</a> }
|
||||
<a class="jxr_linenumber" name="L195" href="#L195">195</a> List<Dependency> dependencies = engine.getDependencies();
|
||||
<a class="jxr_linenumber" name="L196" href="#L196">196</a> LOGGER.info(dependencies.size() + <span class="jxr_string">" dependencies found."</span>);
|
||||
<a class="jxr_linenumber" name="L197" href="#L197">197</a> Iterator<Dependency> dIterator = dependencies.iterator();
|
||||
<a class="jxr_linenumber" name="L198" href="#L198">198</a> <strong class="jxr_keyword">while</strong> (dIterator.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L199" href="#L199">199</a> Dependency dept = dIterator.next();
|
||||
<a class="jxr_linenumber" name="L200" href="#L200">200</a> LOGGER.info(<span class="jxr_string">"dept path: "</span> + dept.getActualFilePath());
|
||||
<a class="jxr_linenumber" name="L201" href="#L201">201</a>
|
||||
<a class="jxr_linenumber" name="L202" href="#L202">202</a> Set<Identifier> identifiers = dept.getIdentifiers();
|
||||
<a class="jxr_linenumber" name="L203" href="#L203">203</a> Iterator<Identifier> idIterator = identifiers.iterator();
|
||||
<a class="jxr_linenumber" name="L204" href="#L204">204</a> <strong class="jxr_keyword">while</strong> (idIterator.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L205" href="#L205">205</a> Identifier id = idIterator.next();
|
||||
<a class="jxr_linenumber" name="L206" href="#L206">206</a> LOGGER.info(<span class="jxr_string">" Identifier: "</span> + id.getValue() + <span class="jxr_string">", type="</span> + id.getType() + <span class="jxr_string">", url="</span> + id.getUrl() + <span class="jxr_string">", conf="</span> + id.getConfidence());
|
||||
<a class="jxr_linenumber" name="L207" href="#L207">207</a> }
|
||||
<a class="jxr_linenumber" name="L208" href="#L208">208</a>
|
||||
<a class="jxr_linenumber" name="L209" href="#L209">209</a> Set<Evidence> prodEv = dept.getProductEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L210" href="#L210">210</a> Iterator<Evidence> it = prodEv.iterator();
|
||||
<a class="jxr_linenumber" name="L211" href="#L211">211</a> <strong class="jxr_keyword">while</strong> (it.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L212" href="#L212">212</a> Evidence e = it.next();
|
||||
<a class="jxr_linenumber" name="L213" href="#L213">213</a> LOGGER.info(<span class="jxr_string">" prod: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L214" href="#L214">214</a> }
|
||||
<a class="jxr_linenumber" name="L215" href="#L215">215</a> Set<Evidence> versionEv = dept.getVersionEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L216" href="#L216">216</a> Iterator<Evidence> vIt = versionEv.iterator();
|
||||
<a class="jxr_linenumber" name="L217" href="#L217">217</a> <strong class="jxr_keyword">while</strong> (vIt.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L218" href="#L218">218</a> Evidence e = vIt.next();
|
||||
<a class="jxr_linenumber" name="L219" href="#L219">219</a> LOGGER.info(<span class="jxr_string">" version: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L220" href="#L220">220</a> }
|
||||
<a class="jxr_linenumber" name="L221" href="#L221">221</a>
|
||||
<a class="jxr_linenumber" name="L222" href="#L222">222</a> Set<Evidence> vendorEv = dept.getVendorEvidence().getEvidence();
|
||||
<a class="jxr_linenumber" name="L223" href="#L223">223</a> Iterator<Evidence> vendorIt = vendorEv.iterator();
|
||||
<a class="jxr_linenumber" name="L224" href="#L224">224</a> <strong class="jxr_keyword">while</strong> (vendorIt.hasNext()) {
|
||||
<a class="jxr_linenumber" name="L225" href="#L225">225</a> Evidence e = vendorIt.next();
|
||||
<a class="jxr_linenumber" name="L226" href="#L226">226</a> LOGGER.info(<span class="jxr_string">" vendor: name="</span> + e.getName() + <span class="jxr_string">", value="</span> + e.getValue() + <span class="jxr_string">", source="</span> + e.getSource() + <span class="jxr_string">", confidence="</span> + e.getConfidence());
|
||||
<a class="jxr_linenumber" name="L227" href="#L227">227</a> }
|
||||
<a class="jxr_linenumber" name="L228" href="#L228">228</a> }
|
||||
<a class="jxr_linenumber" name="L229" href="#L229">229</a> }
|
||||
<a class="jxr_linenumber" name="L230" href="#L230">230</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -0,0 +1,136 @@
|
||||
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
||||
<head><meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>SwiftAnalyzersTest xref</title>
|
||||
<link type="text/css" rel="stylesheet" href="../../../../stylesheet.css" />
|
||||
</head>
|
||||
<body>
|
||||
<div id="overview"><a href="../../../../../testapidocs/org/owasp/dependencycheck/analyzer/SwiftAnalyzersTest.html">View Javadoc</a></div><pre>
|
||||
<a class="jxr_linenumber" name="L1" href="#L1">1</a> <strong class="jxr_keyword">package</strong> org.owasp.dependencycheck.analyzer;
|
||||
<a class="jxr_linenumber" name="L2" href="#L2">2</a>
|
||||
<a class="jxr_linenumber" name="L3" href="#L3">3</a> <strong class="jxr_keyword">import</strong> org.junit.After;
|
||||
<a class="jxr_linenumber" name="L4" href="#L4">4</a> <strong class="jxr_keyword">import</strong> org.junit.Before;
|
||||
<a class="jxr_linenumber" name="L5" href="#L5">5</a> <strong class="jxr_keyword">import</strong> org.junit.Test;
|
||||
<a class="jxr_linenumber" name="L6" href="#L6">6</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.BaseTest;
|
||||
<a class="jxr_linenumber" name="L7" href="#L7">7</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.analyzer.exception.AnalysisException;
|
||||
<a class="jxr_linenumber" name="L8" href="#L8">8</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.dependency.Dependency;
|
||||
<a class="jxr_linenumber" name="L9" href="#L9">9</a>
|
||||
<a class="jxr_linenumber" name="L10" href="#L10">10</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.hamcrest.CoreMatchers.containsString;
|
||||
<a class="jxr_linenumber" name="L11" href="#L11">11</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.hamcrest.CoreMatchers.is;
|
||||
<a class="jxr_linenumber" name="L12" href="#L12">12</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assert.assertThat;
|
||||
<a class="jxr_linenumber" name="L13" href="#L13">13</a>
|
||||
<a class="jxr_linenumber" name="L14" href="#L14">14</a> <strong class="jxr_keyword">import</strong> java.io.File;
|
||||
<a class="jxr_linenumber" name="L15" href="#L15">15</a>
|
||||
<a class="jxr_linenumber" name="L16" href="#L16">16</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L17" href="#L17">17</a> <em class="jxr_javadoccomment"> * Unit tests for CocoaPodsAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L18" href="#L18">18</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L19" href="#L19">19</a> <em class="jxr_javadoccomment"> * @author Bianca Jiang</em>
|
||||
<a class="jxr_linenumber" name="L20" href="#L20">20</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L21" href="#L21">21</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/analyzer/SwiftAnalyzersTest.html">SwiftAnalyzersTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../org/owasp/dependencycheck/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L22" href="#L22">22</a>
|
||||
<a class="jxr_linenumber" name="L23" href="#L23">23</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L24" href="#L24">24</a> <em class="jxr_javadoccomment"> * The analyzer to test.</em>
|
||||
<a class="jxr_linenumber" name="L25" href="#L25">25</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L26" href="#L26">26</a> CocoaPodsAnalyzer podsAnalyzer;
|
||||
<a class="jxr_linenumber" name="L27" href="#L27">27</a> SwiftPackageManagerAnalyzer spmAnalyzer;
|
||||
<a class="jxr_linenumber" name="L28" href="#L28">28</a>
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a> <em class="jxr_javadoccomment"> * Correctly setup the analyzer for testing.</em>
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <em class="jxr_javadoccomment"> * @throws Exception thrown if there is a problem</em>
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> @Before
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setUp() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> podsAnalyzer = <strong class="jxr_keyword">new</strong> CocoaPodsAnalyzer();
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> podsAnalyzer.setFilesMatched(<strong class="jxr_keyword">true</strong>);
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a> podsAnalyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a>
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> spmAnalyzer = <strong class="jxr_keyword">new</strong> SwiftPackageManagerAnalyzer();
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> spmAnalyzer.setFilesMatched(<strong class="jxr_keyword">true</strong>);
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> spmAnalyzer.initialize();
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> }
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> <em class="jxr_javadoccomment"> * Cleanup the analyzer's temp files, etc.</em>
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <em class="jxr_javadoccomment"> * @throws Exception thrown if there is a problem</em>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> @After
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> tearDown() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> podsAnalyzer.close();
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> podsAnalyzer = <strong class="jxr_keyword">null</strong>;
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a>
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> spmAnalyzer.close();
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> spmAnalyzer = <strong class="jxr_keyword">null</strong>;
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> }
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a>
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> <em class="jxr_javadoccomment"> * Test of getName method, of class CocoaPodsAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> @Test
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testPodsGetName() {
|
||||
<a class="jxr_linenumber" name="L64" href="#L64">64</a> assertThat(podsAnalyzer.getName(), is(<span class="jxr_string">"CocoaPods Package Analyzer"</span>));
|
||||
<a class="jxr_linenumber" name="L65" href="#L65">65</a> }
|
||||
<a class="jxr_linenumber" name="L66" href="#L66">66</a>
|
||||
<a class="jxr_linenumber" name="L67" href="#L67">67</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L68" href="#L68">68</a> <em class="jxr_javadoccomment"> * Test of getName method, of class SwiftPackageManagerAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L69" href="#L69">69</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L70" href="#L70">70</a> @Test
|
||||
<a class="jxr_linenumber" name="L71" href="#L71">71</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testSPMGetName() {
|
||||
<a class="jxr_linenumber" name="L72" href="#L72">72</a> assertThat(spmAnalyzer.getName(), is(<span class="jxr_string">"SWIFT Package Manager Analyzer"</span>));
|
||||
<a class="jxr_linenumber" name="L73" href="#L73">73</a> }
|
||||
<a class="jxr_linenumber" name="L74" href="#L74">74</a>
|
||||
<a class="jxr_linenumber" name="L75" href="#L75">75</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L76" href="#L76">76</a> <em class="jxr_javadoccomment"> * Test of supportsFiles method, of class CocoaPodsAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L77" href="#L77">77</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L78" href="#L78">78</a> @Test
|
||||
<a class="jxr_linenumber" name="L79" href="#L79">79</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testPodsSupportsFiles() {
|
||||
<a class="jxr_linenumber" name="L80" href="#L80">80</a> assertThat(podsAnalyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"test.podspec"</span>)), is(<strong class="jxr_keyword">true</strong>));
|
||||
<a class="jxr_linenumber" name="L81" href="#L81">81</a> }
|
||||
<a class="jxr_linenumber" name="L82" href="#L82">82</a>
|
||||
<a class="jxr_linenumber" name="L83" href="#L83">83</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L84" href="#L84">84</a> <em class="jxr_javadoccomment"> * Test of supportsFiles method, of class SwiftPackageManagerAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L85" href="#L85">85</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L86" href="#L86">86</a> @Test
|
||||
<a class="jxr_linenumber" name="L87" href="#L87">87</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testSPMSupportsFiles() {
|
||||
<a class="jxr_linenumber" name="L88" href="#L88">88</a> assertThat(spmAnalyzer.accept(<strong class="jxr_keyword">new</strong> File(<span class="jxr_string">"Package.swift"</span>)), is(<strong class="jxr_keyword">true</strong>));
|
||||
<a class="jxr_linenumber" name="L89" href="#L89">89</a> }
|
||||
<a class="jxr_linenumber" name="L90" href="#L90">90</a>
|
||||
<a class="jxr_linenumber" name="L91" href="#L91">91</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L92" href="#L92">92</a> <em class="jxr_javadoccomment"> * Test of analyze method, of class CocoaPodsAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L93" href="#L93">93</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L94" href="#L94">94</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L95" href="#L95">95</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L96" href="#L96">96</a> @Test
|
||||
<a class="jxr_linenumber" name="L97" href="#L97">97</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testCocoaPodsAnalyzer() <strong class="jxr_keyword">throws</strong> AnalysisException {
|
||||
<a class="jxr_linenumber" name="L98" href="#L98">98</a> <strong class="jxr_keyword">final</strong> Dependency result = <strong class="jxr_keyword">new</strong> Dependency(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L99" href="#L99">99</a> <span class="jxr_string">"swift/cocoapods/EasyPeasy.podspec"</span>));
|
||||
<a class="jxr_linenumber" name="L100" href="#L100">100</a> podsAnalyzer.analyze(result, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L101" href="#L101">101</a> <strong class="jxr_keyword">final</strong> String vendorString = result.getVendorEvidence().toString();
|
||||
<a class="jxr_linenumber" name="L102" href="#L102">102</a>
|
||||
<a class="jxr_linenumber" name="L103" href="#L103">103</a> assertThat(vendorString, containsString(<span class="jxr_string">"Carlos Vidal"</span>));
|
||||
<a class="jxr_linenumber" name="L104" href="#L104">104</a> assertThat(vendorString, containsString(<span class="jxr_string">"https://github.com/nakiostudio/EasyPeasy"</span>));
|
||||
<a class="jxr_linenumber" name="L105" href="#L105">105</a> assertThat(vendorString, containsString(<span class="jxr_string">"MIT"</span>));
|
||||
<a class="jxr_linenumber" name="L106" href="#L106">106</a> assertThat(result.getProductEvidence().toString(), containsString(<span class="jxr_string">"EasyPeasy"</span>));
|
||||
<a class="jxr_linenumber" name="L107" href="#L107">107</a> assertThat(result.getVersionEvidence().toString(), containsString(<span class="jxr_string">"0.2.3"</span>));
|
||||
<a class="jxr_linenumber" name="L108" href="#L108">108</a> }
|
||||
<a class="jxr_linenumber" name="L109" href="#L109">109</a>
|
||||
<a class="jxr_linenumber" name="L110" href="#L110">110</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L111" href="#L111">111</a> <em class="jxr_javadoccomment"> * Test of analyze method, of class SwiftPackageManagerAnalyzer.</em>
|
||||
<a class="jxr_linenumber" name="L112" href="#L112">112</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L113" href="#L113">113</a> <em class="jxr_javadoccomment"> * @throws AnalysisException is thrown when an exception occurs.</em>
|
||||
<a class="jxr_linenumber" name="L114" href="#L114">114</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L115" href="#L115">115</a> @Test
|
||||
<a class="jxr_linenumber" name="L116" href="#L116">116</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testSPMAnalyzer() <strong class="jxr_keyword">throws</strong> AnalysisException {
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> <strong class="jxr_keyword">final</strong> Dependency result = <strong class="jxr_keyword">new</strong> Dependency(BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>,
|
||||
<a class="jxr_linenumber" name="L118" href="#L118">118</a> <span class="jxr_string">"swift/Gloss/Package.swift"</span>));
|
||||
<a class="jxr_linenumber" name="L119" href="#L119">119</a> spmAnalyzer.analyze(result, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a>
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a> assertThat(result.getProductEvidence().toString(), containsString(<span class="jxr_string">"Gloss"</span>));
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a> }
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
</body>
|
||||
</html>
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.analyzer</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.analyzer</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
@@ -89,6 +89,9 @@
|
||||
</li>
|
||||
<li>
|
||||
<a href="RubyGemspecAnalyzerTest.html" target="classFrame">RubyGemspecAnalyzerTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="SwiftAnalyzersTest.html" target="classFrame">SwiftAnalyzersTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="VulnerabilitySuppressionAnalyzerIntegrationTest.html" target="classFrame">VulnerabilitySuppressionAnalyzerIntegrationTest</a>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.analyzer</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.analyzer</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
@@ -159,6 +159,11 @@
|
||||
<td>
|
||||
<a href="RubyGemspecAnalyzerTest.html" target="classFrame">RubyGemspecAnalyzerTest</a>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<a href="SwiftAnalyzersTest.html" target="classFrame">SwiftAnalyzersTest</a>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.central</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.central</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.central</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.central</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.composer</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.composer</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.composer</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.composer</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.cpe</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.cpe</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.cpe</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.cpe</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.cwe</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.cwe</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.cwe</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.cwe</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.lucene</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.lucene</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.lucene</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.lucene</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nexus</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nexus</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nexus</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nexus</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nuget</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nuget</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nuget</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nuget</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nvdcve</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nvdcve</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.nvdcve</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.nvdcve</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -37,7 +37,7 @@
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a> <em class="jxr_javadoccomment"> * @author Jeremy Long</em>
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/owasp/dependencycheck/data/update/nvd/NvdCveUpdaterIntegrationTest.html">NvdCveUpdaterIntegrationTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../../org/owasp/dependencycheck/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../../org/owasp/dependencycheck/data/update/NvdCveUpdaterIntegrationTest.html">NvdCveUpdaterIntegrationTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../../org/owasp/dependencycheck/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a>
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <strong class="jxr_keyword">public</strong> NvdCveUpdater getUpdater() <strong class="jxr_keyword">throws</strong> MalformedURLException, DownloadFailedException, UpdateException {
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> NvdCveUpdater instance = <strong class="jxr_keyword">new</strong> NvdCveUpdater();
|
||||
@@ -48,27 +48,26 @@
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> <em class="jxr_comment">// /**</em>
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> <em class="jxr_comment">// * Test of update method, of class StandardUpdate.</em>
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> <em class="jxr_comment">// */</em>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <em class="jxr_comment">// @Test</em>
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <em class="jxr_comment">// public void testUpdate() throws Exception {</em>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <em class="jxr_comment">// StandardUpdate instance = getStandardUpdateTask();</em>
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> <em class="jxr_comment">// instance.update();</em>
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> <em class="jxr_comment">// //TODO make this an actual test</em>
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <em class="jxr_comment">// }</em>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> <em class="jxr_javadoccomment"> * Test of updatesNeeded method, of class StandardUpdate.</em>
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> @Test
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testUpdatesNeeded() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> NvdCveUpdater instance = getUpdater();
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> instance.openDataStores();
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> UpdateableNvdCve result = instance.getUpdatesNeeded();
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> assertNotNull(result);
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> instance.closeDataStores();
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> }
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> }
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> }
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> @Test
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testUpdate() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> NvdCveUpdater instance = getUpdater();
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> instance.update();
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> }
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <em class="jxr_javadoccomment"> * Test of updatesNeeded method, of class StandardUpdate.</em>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> @Test
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testUpdatesNeeded() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> NvdCveUpdater instance = getUpdater();
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> instance.openDataStores();
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> UpdateableNvdCve result = instance.getUpdatesNeeded();
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> assertNotNull(result);
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> instance.closeDataStores();
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> }
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> }
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.update.nvd</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.update.nvd</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
@@ -20,9 +20,6 @@
|
||||
</li>
|
||||
<li>
|
||||
<a href="NvdCveInfoTest.html" target="classFrame">NvdCveInfoTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="NvdCveUpdaterIntegrationTest.html" target="classFrame">NvdCveUpdaterIntegrationTest</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="NvdCve_1_2_HandlerTest.html" target="classFrame">NvdCve_1_2_HandlerTest</a>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.update.nvd</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.update.nvd</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
@@ -44,11 +44,6 @@
|
||||
<td>
|
||||
<a href="NvdCveInfoTest.html" target="classFrame">NvdCveInfoTest</a>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
<a href="NvdCveUpdaterIntegrationTest.html" target="classFrame">NvdCveUpdaterIntegrationTest</a>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.update</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.update</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.data.update</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.data.update</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.dependency</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.dependency</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.dependency</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.dependency</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -41,97 +41,102 @@
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a> <strong class="jxr_keyword">import</strong> org.apache.maven.project.MavenProject;
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assert.assertFalse;
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> <strong class="jxr_keyword">import</strong> <strong class="jxr_keyword">static</strong> org.junit.Assert.assertTrue;
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> <strong class="jxr_keyword">import</strong> org.junit.Test;
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.data.nvdcve.DatabaseException;
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.InvalidSettingException;
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a>
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <em class="jxr_javadoccomment"> * @author Jeremy Long</em>
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../org/owasp/dependencycheck/utils/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a>
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <em class="jxr_javadoccomment"> * Checks if the test can be run. The test in this class fail, presumable due to jmockit, if the JDK is 1.8+.</em>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> <em class="jxr_javadoccomment"> * @return true if the JDK is below 1.8.</em>
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> canRun() {
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> String version = System.getProperty(<span class="jxr_string">"java.version"</span>);
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> <strong class="jxr_keyword">int</strong> length = version.indexOf('.', version.indexOf('.') + 1);
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> version = version.substring(0, length);
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a>
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> <strong class="jxr_keyword">double</strong> v = Double.parseDouble(version);
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> <strong class="jxr_keyword">return</strong> v == 1.7;
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> }
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a>
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> <em class="jxr_javadoccomment"> * Test of scanArtifacts method, of class BaseDependencyCheckMojo.</em>
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L64" href="#L64">64</a> @Test
|
||||
<a class="jxr_linenumber" name="L65" href="#L65">65</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testScanArtifacts() <strong class="jxr_keyword">throws</strong> DatabaseException, InvalidSettingException {
|
||||
<a class="jxr_linenumber" name="L66" href="#L66">66</a> <em class="jxr_comment">//TODO get this to work under JDK 1.8</em>
|
||||
<a class="jxr_linenumber" name="L67" href="#L67">67</a> <strong class="jxr_keyword">if</strong> (canRun()) {
|
||||
<a class="jxr_linenumber" name="L68" href="#L68">68</a> MavenProject project = <strong class="jxr_keyword">new</strong> MockUp<MavenProject>() {
|
||||
<a class="jxr_linenumber" name="L69" href="#L69">69</a> @Mock
|
||||
<a class="jxr_linenumber" name="L70" href="#L70">70</a> <strong class="jxr_keyword">public</strong> Set<Artifact> getArtifacts() {
|
||||
<a class="jxr_linenumber" name="L71" href="#L71">71</a> Set<Artifact> artifacts = <strong class="jxr_keyword">new</strong> HashSet<Artifact>();
|
||||
<a class="jxr_linenumber" name="L72" href="#L72">72</a> Artifact a = <strong class="jxr_keyword">new</strong> ArtifactStub();
|
||||
<a class="jxr_linenumber" name="L73" href="#L73">73</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L74" href="#L74">74</a> File file = <strong class="jxr_keyword">new</strong> File(Test.<strong class="jxr_keyword">class</strong>.getProtectionDomain().getCodeSource().getLocation().toURI());
|
||||
<a class="jxr_linenumber" name="L75" href="#L75">75</a> a.setFile(file);
|
||||
<a class="jxr_linenumber" name="L76" href="#L76">76</a> artifacts.add(a);
|
||||
<a class="jxr_linenumber" name="L77" href="#L77">77</a> } <strong class="jxr_keyword">catch</strong> (URISyntaxException ex) {
|
||||
<a class="jxr_linenumber" name="L78" href="#L78">78</a> Logger.getLogger(BaseDependencyCheckMojoTest.<strong class="jxr_keyword">class</strong>.getName()).log(Level.SEVERE, <strong class="jxr_keyword">null</strong>, ex);
|
||||
<a class="jxr_linenumber" name="L79" href="#L79">79</a> }
|
||||
<a class="jxr_linenumber" name="L80" href="#L80">80</a> <em class="jxr_comment">//File file = new File(this.getClass().getClassLoader().getResource("daytrader-ear-2.1.7.ear").getPath());</em>
|
||||
<a class="jxr_linenumber" name="L81" href="#L81">81</a>
|
||||
<a class="jxr_linenumber" name="L82" href="#L82">82</a> <strong class="jxr_keyword">return</strong> artifacts;
|
||||
<a class="jxr_linenumber" name="L83" href="#L83">83</a> }
|
||||
<a class="jxr_linenumber" name="L84" href="#L84">84</a>
|
||||
<a class="jxr_linenumber" name="L85" href="#L85">85</a> @Mock
|
||||
<a class="jxr_linenumber" name="L86" href="#L86">86</a> <strong class="jxr_keyword">public</strong> String getName() {
|
||||
<a class="jxr_linenumber" name="L87" href="#L87">87</a> <strong class="jxr_keyword">return</strong> <span class="jxr_string">"test-project"</span>;
|
||||
<a class="jxr_linenumber" name="L88" href="#L88">88</a> }
|
||||
<a class="jxr_linenumber" name="L89" href="#L89">89</a> }.getMockInstance();
|
||||
<a class="jxr_linenumber" name="L90" href="#L90">90</a>
|
||||
<a class="jxr_linenumber" name="L91" href="#L91">91</a> <strong class="jxr_keyword">boolean</strong> autoUpdate = Settings.getBoolean(Settings.KEYS.AUTO_UPDATE);
|
||||
<a class="jxr_linenumber" name="L92" href="#L92">92</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, false);
|
||||
<a class="jxr_linenumber" name="L93" href="#L93">93</a> MavenEngine engine = <strong class="jxr_keyword">new</strong> MavenEngine(<strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L94" href="#L94">94</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
|
||||
<a class="jxr_linenumber" name="L95" href="#L95">95</a>
|
||||
<a class="jxr_linenumber" name="L96" href="#L96">96</a> assertTrue(engine.getDependencies().isEmpty());
|
||||
<a class="jxr_linenumber" name="L97" href="#L97">97</a> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a> instance = <strong class="jxr_keyword">new</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a>();
|
||||
<a class="jxr_linenumber" name="L98" href="#L98">98</a> instance.scanArtifacts(project, engine);
|
||||
<a class="jxr_linenumber" name="L99" href="#L99">99</a> assertFalse(engine.getDependencies().isEmpty());
|
||||
<a class="jxr_linenumber" name="L100" href="#L100">100</a> engine.cleanup();
|
||||
<a class="jxr_linenumber" name="L101" href="#L101">101</a> }
|
||||
<a class="jxr_linenumber" name="L102" href="#L102">102</a> }
|
||||
<a class="jxr_linenumber" name="L103" href="#L103">103</a>
|
||||
<a class="jxr_linenumber" name="L104" href="#L104">104</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a> <strong class="jxr_keyword">extends</strong> BaseDependencyCheckMojo {
|
||||
<a class="jxr_linenumber" name="L105" href="#L105">105</a>
|
||||
<a class="jxr_linenumber" name="L106" href="#L106">106</a> @Override
|
||||
<a class="jxr_linenumber" name="L107" href="#L107">107</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> runCheck() <strong class="jxr_keyword">throws</strong> MojoExecutionException, MojoFailureException {
|
||||
<a class="jxr_linenumber" name="L108" href="#L108">108</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> UnsupportedOperationException(<span class="jxr_string">"Not supported yet."</span>); <em class="jxr_comment">//To change body of generated methods, choose Tools | Templates.</em>
|
||||
<a class="jxr_linenumber" name="L109" href="#L109">109</a> }
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> <strong class="jxr_keyword">import</strong> org.junit.Assume;
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">import</strong> org.junit.Test;
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.data.nvdcve.DatabaseException;
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.InvalidSettingException;
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a>
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <em class="jxr_javadoccomment"> * @author Jeremy Long</em>
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoTest</a> <strong class="jxr_keyword">extends</strong> <a href="../../../../org/owasp/dependencycheck/utils/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a>
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> <em class="jxr_javadoccomment"> * Checks if the test can be run. The test in this class fail, presumable</em>
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> <em class="jxr_javadoccomment"> * due to jmockit, if the JDK is 1.8+.</em>
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> <em class="jxr_javadoccomment"> * @return true if the JDK is below 1.8.</em>
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> canRun() {
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> String version = System.getProperty(<span class="jxr_string">"java.version"</span>);
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> <strong class="jxr_keyword">int</strong> length = version.indexOf('.', version.indexOf('.') + 1);
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a> version = version.substring(0, length);
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a>
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> <strong class="jxr_keyword">double</strong> v = Double.parseDouble(version);
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> <strong class="jxr_keyword">return</strong> v == 1.7;
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> }
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a>
|
||||
<a class="jxr_linenumber" name="L63" href="#L63">63</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L64" href="#L64">64</a> <em class="jxr_javadoccomment"> * Test of scanArtifacts method, of class BaseDependencyCheckMojo.</em>
|
||||
<a class="jxr_linenumber" name="L65" href="#L65">65</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L66" href="#L66">66</a> @Test
|
||||
<a class="jxr_linenumber" name="L67" href="#L67">67</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testScanArtifacts() <strong class="jxr_keyword">throws</strong> DatabaseException, InvalidSettingException {
|
||||
<a class="jxr_linenumber" name="L68" href="#L68">68</a> <strong class="jxr_keyword">if</strong> (canRun()) {
|
||||
<a class="jxr_linenumber" name="L69" href="#L69">69</a> MavenProject project = <strong class="jxr_keyword">new</strong> MockUp<MavenProject>() {
|
||||
<a class="jxr_linenumber" name="L70" href="#L70">70</a> @Mock
|
||||
<a class="jxr_linenumber" name="L71" href="#L71">71</a> <strong class="jxr_keyword">public</strong> Set<Artifact> getArtifacts() {
|
||||
<a class="jxr_linenumber" name="L72" href="#L72">72</a> Set<Artifact> artifacts = <strong class="jxr_keyword">new</strong> HashSet<Artifact>();
|
||||
<a class="jxr_linenumber" name="L73" href="#L73">73</a> Artifact a = <strong class="jxr_keyword">new</strong> ArtifactStub();
|
||||
<a class="jxr_linenumber" name="L74" href="#L74">74</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L75" href="#L75">75</a> File file = <strong class="jxr_keyword">new</strong> File(Test.<strong class="jxr_keyword">class</strong>.getProtectionDomain().getCodeSource().getLocation().toURI());
|
||||
<a class="jxr_linenumber" name="L76" href="#L76">76</a> a.setFile(file);
|
||||
<a class="jxr_linenumber" name="L77" href="#L77">77</a> artifacts.add(a);
|
||||
<a class="jxr_linenumber" name="L78" href="#L78">78</a> } <strong class="jxr_keyword">catch</strong> (URISyntaxException ex) {
|
||||
<a class="jxr_linenumber" name="L79" href="#L79">79</a> Logger.getLogger(BaseDependencyCheckMojoTest.<strong class="jxr_keyword">class</strong>.getName()).log(Level.SEVERE, <strong class="jxr_keyword">null</strong>, ex);
|
||||
<a class="jxr_linenumber" name="L80" href="#L80">80</a> }
|
||||
<a class="jxr_linenumber" name="L81" href="#L81">81</a> <em class="jxr_comment">//File file = new File(this.getClass().getClassLoader().getResource("daytrader-ear-2.1.7.ear").getPath());</em>
|
||||
<a class="jxr_linenumber" name="L82" href="#L82">82</a>
|
||||
<a class="jxr_linenumber" name="L83" href="#L83">83</a> <strong class="jxr_keyword">return</strong> artifacts;
|
||||
<a class="jxr_linenumber" name="L84" href="#L84">84</a> }
|
||||
<a class="jxr_linenumber" name="L85" href="#L85">85</a>
|
||||
<a class="jxr_linenumber" name="L86" href="#L86">86</a> @Mock
|
||||
<a class="jxr_linenumber" name="L87" href="#L87">87</a> <strong class="jxr_keyword">public</strong> String getName() {
|
||||
<a class="jxr_linenumber" name="L88" href="#L88">88</a> <strong class="jxr_keyword">return</strong> <span class="jxr_string">"test-project"</span>;
|
||||
<a class="jxr_linenumber" name="L89" href="#L89">89</a> }
|
||||
<a class="jxr_linenumber" name="L90" href="#L90">90</a> }.getMockInstance();
|
||||
<a class="jxr_linenumber" name="L91" href="#L91">91</a>
|
||||
<a class="jxr_linenumber" name="L92" href="#L92">92</a> <strong class="jxr_keyword">boolean</strong> autoUpdate = Settings.getBoolean(Settings.KEYS.AUTO_UPDATE);
|
||||
<a class="jxr_linenumber" name="L93" href="#L93">93</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, false);
|
||||
<a class="jxr_linenumber" name="L94" href="#L94">94</a> MavenEngine engine = <strong class="jxr_keyword">new</strong> MavenEngine(<strong class="jxr_keyword">null</strong>, <strong class="jxr_keyword">null</strong>);
|
||||
<a class="jxr_linenumber" name="L95" href="#L95">95</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
|
||||
<a class="jxr_linenumber" name="L96" href="#L96">96</a>
|
||||
<a class="jxr_linenumber" name="L97" href="#L97">97</a> assertTrue(engine.getDependencies().isEmpty());
|
||||
<a class="jxr_linenumber" name="L98" href="#L98">98</a> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a> instance = <strong class="jxr_keyword">new</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a>();
|
||||
<a class="jxr_linenumber" name="L99" href="#L99">99</a> <strong class="jxr_keyword">try</strong> { <em class="jxr_comment">//the mock above fails under some JDKs</em>
|
||||
<a class="jxr_linenumber" name="L100" href="#L100">100</a> instance.scanArtifacts(project, engine);
|
||||
<a class="jxr_linenumber" name="L101" href="#L101">101</a> } <strong class="jxr_keyword">catch</strong> (NullPointerException ex) {
|
||||
<a class="jxr_linenumber" name="L102" href="#L102">102</a> Assume.assumeNoException(ex);
|
||||
<a class="jxr_linenumber" name="L103" href="#L103">103</a> }
|
||||
<a class="jxr_linenumber" name="L104" href="#L104">104</a> assertFalse(engine.getDependencies().isEmpty());
|
||||
<a class="jxr_linenumber" name="L105" href="#L105">105</a> engine.cleanup();
|
||||
<a class="jxr_linenumber" name="L106" href="#L106">106</a> }
|
||||
<a class="jxr_linenumber" name="L107" href="#L107">107</a> }
|
||||
<a class="jxr_linenumber" name="L108" href="#L108">108</a>
|
||||
<a class="jxr_linenumber" name="L109" href="#L109">109</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/maven/BaseDependencyCheckMojoTest.html">BaseDependencyCheckMojoImpl</a> <strong class="jxr_keyword">extends</strong> BaseDependencyCheckMojo {
|
||||
<a class="jxr_linenumber" name="L110" href="#L110">110</a>
|
||||
<a class="jxr_linenumber" name="L111" href="#L111">111</a> @Override
|
||||
<a class="jxr_linenumber" name="L112" href="#L112">112</a> <strong class="jxr_keyword">public</strong> String getName(Locale locale) {
|
||||
<a class="jxr_linenumber" name="L113" href="#L113">113</a> <strong class="jxr_keyword">return</strong> <span class="jxr_string">"test implementation"</span>;
|
||||
<a class="jxr_linenumber" name="L112" href="#L112">112</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> runCheck() <strong class="jxr_keyword">throws</strong> MojoExecutionException, MojoFailureException {
|
||||
<a class="jxr_linenumber" name="L113" href="#L113">113</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> UnsupportedOperationException(<span class="jxr_string">"Not supported yet."</span>); <em class="jxr_comment">//To change body of generated methods, choose Tools | Templates.</em>
|
||||
<a class="jxr_linenumber" name="L114" href="#L114">114</a> }
|
||||
<a class="jxr_linenumber" name="L115" href="#L115">115</a>
|
||||
<a class="jxr_linenumber" name="L116" href="#L116">116</a> @Override
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> <strong class="jxr_keyword">public</strong> String getDescription(Locale locale) {
|
||||
<a class="jxr_linenumber" name="L117" href="#L117">117</a> <strong class="jxr_keyword">public</strong> String getName(Locale locale) {
|
||||
<a class="jxr_linenumber" name="L118" href="#L118">118</a> <strong class="jxr_keyword">return</strong> <span class="jxr_string">"test implementation"</span>;
|
||||
<a class="jxr_linenumber" name="L119" href="#L119">119</a> }
|
||||
<a class="jxr_linenumber" name="L120" href="#L120">120</a>
|
||||
<a class="jxr_linenumber" name="L121" href="#L121">121</a> @Override
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> canGenerateReport() {
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> UnsupportedOperationException(<span class="jxr_string">"Not supported yet."</span>); <em class="jxr_comment">//To change body of generated methods, choose Tools | Templates.</em>
|
||||
<a class="jxr_linenumber" name="L122" href="#L122">122</a> <strong class="jxr_keyword">public</strong> String getDescription(Locale locale) {
|
||||
<a class="jxr_linenumber" name="L123" href="#L123">123</a> <strong class="jxr_keyword">return</strong> <span class="jxr_string">"test implementation"</span>;
|
||||
<a class="jxr_linenumber" name="L124" href="#L124">124</a> }
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a> }
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> }
|
||||
<a class="jxr_linenumber" name="L125" href="#L125">125</a>
|
||||
<a class="jxr_linenumber" name="L126" href="#L126">126</a> @Override
|
||||
<a class="jxr_linenumber" name="L127" href="#L127">127</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> canGenerateReport() {
|
||||
<a class="jxr_linenumber" name="L128" href="#L128">128</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> UnsupportedOperationException(<span class="jxr_string">"Not supported yet."</span>); <em class="jxr_comment">//To change body of generated methods, choose Tools | Templates.</em>
|
||||
<a class="jxr_linenumber" name="L129" href="#L129">129</a> }
|
||||
<a class="jxr_linenumber" name="L130" href="#L130">130</a> }
|
||||
<a class="jxr_linenumber" name="L131" href="#L131">131</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -25,34 +25,49 @@
|
||||
<a class="jxr_linenumber" name="L17" href="#L17">17</a> <em class="jxr_comment"> */</em>
|
||||
<a class="jxr_linenumber" name="L18" href="#L18">18</a> <strong class="jxr_keyword">package</strong> org.owasp.dependencycheck.maven;
|
||||
<a class="jxr_linenumber" name="L19" href="#L19">19</a>
|
||||
<a class="jxr_linenumber" name="L20" href="#L20">20</a> <strong class="jxr_keyword">import</strong> java.io.InputStream;
|
||||
<a class="jxr_linenumber" name="L21" href="#L21">21</a> <strong class="jxr_keyword">import</strong> org.junit.AfterClass;
|
||||
<a class="jxr_linenumber" name="L22" href="#L22">22</a> <strong class="jxr_keyword">import</strong> org.junit.BeforeClass;
|
||||
<a class="jxr_linenumber" name="L23" href="#L23">23</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L24" href="#L24">24</a>
|
||||
<a class="jxr_linenumber" name="L25" href="#L25">25</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L26" href="#L26">26</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L27" href="#L27">27</a> <em class="jxr_javadoccomment"> * @author Jeremy Long</em>
|
||||
<a class="jxr_linenumber" name="L28" href="#L28">28</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/utils/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a>
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <em class="jxr_javadoccomment"> * The properties file location.</em>
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String PROPERTIES_FILE = <span class="jxr_string">"mojo.properties"</span>;
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a>
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> @BeforeClass
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">void</strong> setUpClass() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a> Settings.initialize();
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a> InputStream mojoProperties = BaseTest.<strong class="jxr_keyword">class</strong>.getClassLoader().getResourceAsStream(BaseTest.PROPERTIES_FILE);
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> Settings.mergeProperties(mojoProperties);
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> }
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a>
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> @AfterClass
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">void</strong> tearDownClass() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> Settings.cleanup(<strong class="jxr_keyword">true</strong>);
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> }
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> }
|
||||
<a class="jxr_linenumber" name="L20" href="#L20">20</a> <strong class="jxr_keyword">import</strong> java.io.IOException;
|
||||
<a class="jxr_linenumber" name="L21" href="#L21">21</a> <strong class="jxr_keyword">import</strong> java.io.InputStream;
|
||||
<a class="jxr_linenumber" name="L22" href="#L22">22</a> <strong class="jxr_keyword">import</strong> java.util.logging.Level;
|
||||
<a class="jxr_linenumber" name="L23" href="#L23">23</a> <strong class="jxr_keyword">import</strong> java.util.logging.Logger;
|
||||
<a class="jxr_linenumber" name="L24" href="#L24">24</a> <strong class="jxr_keyword">import</strong> org.junit.AfterClass;
|
||||
<a class="jxr_linenumber" name="L25" href="#L25">25</a> <strong class="jxr_keyword">import</strong> org.junit.BeforeClass;
|
||||
<a class="jxr_linenumber" name="L26" href="#L26">26</a> <strong class="jxr_keyword">import</strong> org.owasp.dependencycheck.utils.Settings;
|
||||
<a class="jxr_linenumber" name="L27" href="#L27">27</a>
|
||||
<a class="jxr_linenumber" name="L28" href="#L28">28</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L29" href="#L29">29</a> <em class="jxr_javadoccomment"> *</em>
|
||||
<a class="jxr_linenumber" name="L30" href="#L30">30</a> <em class="jxr_javadoccomment"> * @author Jeremy Long</em>
|
||||
<a class="jxr_linenumber" name="L31" href="#L31">31</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L32" href="#L32">32</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/utils/BaseTest.html">BaseTest</a> {
|
||||
<a class="jxr_linenumber" name="L33" href="#L33">33</a>
|
||||
<a class="jxr_linenumber" name="L34" href="#L34">34</a> <em class="jxr_javadoccomment">/**</em>
|
||||
<a class="jxr_linenumber" name="L35" href="#L35">35</a> <em class="jxr_javadoccomment"> * The properties file location.</em>
|
||||
<a class="jxr_linenumber" name="L36" href="#L36">36</a> <em class="jxr_javadoccomment"> */</em>
|
||||
<a class="jxr_linenumber" name="L37" href="#L37">37</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">final</strong> String PROPERTIES_FILE = <span class="jxr_string">"mojo.properties"</span>;
|
||||
<a class="jxr_linenumber" name="L38" href="#L38">38</a>
|
||||
<a class="jxr_linenumber" name="L39" href="#L39">39</a> @BeforeClass
|
||||
<a class="jxr_linenumber" name="L40" href="#L40">40</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">void</strong> setUpClass() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L41" href="#L41">41</a> Settings.initialize();
|
||||
<a class="jxr_linenumber" name="L42" href="#L42">42</a> InputStream mojoProperties = <strong class="jxr_keyword">null</strong>;
|
||||
<a class="jxr_linenumber" name="L43" href="#L43">43</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L44" href="#L44">44</a> mojoProperties = BaseTest.<strong class="jxr_keyword">class</strong>.getClassLoader().getResourceAsStream(BaseTest.PROPERTIES_FILE);
|
||||
<a class="jxr_linenumber" name="L45" href="#L45">45</a> Settings.mergeProperties(mojoProperties);
|
||||
<a class="jxr_linenumber" name="L46" href="#L46">46</a> } <strong class="jxr_keyword">finally</strong> {
|
||||
<a class="jxr_linenumber" name="L47" href="#L47">47</a> <strong class="jxr_keyword">if</strong> (mojoProperties != <strong class="jxr_keyword">null</strong>) {
|
||||
<a class="jxr_linenumber" name="L48" href="#L48">48</a> <strong class="jxr_keyword">try</strong> {
|
||||
<a class="jxr_linenumber" name="L49" href="#L49">49</a> mojoProperties.close();
|
||||
<a class="jxr_linenumber" name="L50" href="#L50">50</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
|
||||
<a class="jxr_linenumber" name="L51" href="#L51">51</a> Logger.getLogger(BaseTest.<strong class="jxr_keyword">class</strong>.getName()).log(Level.SEVERE, <strong class="jxr_keyword">null</strong>, ex);
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> }
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> }
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> }
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a>
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> }
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a>
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> @AfterClass
|
||||
<a class="jxr_linenumber" name="L59" href="#L59">59</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">void</strong> tearDownClass() <strong class="jxr_keyword">throws</strong> Exception {
|
||||
<a class="jxr_linenumber" name="L60" href="#L60">60</a> Settings.cleanup(<strong class="jxr_keyword">true</strong>);
|
||||
<a class="jxr_linenumber" name="L61" href="#L61">61</a> }
|
||||
<a class="jxr_linenumber" name="L62" href="#L62">62</a> }
|
||||
</pre>
|
||||
<hr/>
|
||||
<div id="footer">Copyright © 2012–2016 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.maven</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.maven</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.maven</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.maven</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.reporting</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.reporting</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.reporting</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.reporting</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.taskdefs</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.taskdefs</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.taskdefs</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.taskdefs</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.utils</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.utils</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.utils</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.utils</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -60,7 +60,7 @@
|
||||
<a class="jxr_linenumber" name="L52" href="#L52">52</a> @Test
|
||||
<a class="jxr_linenumber" name="L53" href="#L53">53</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> testHandler() <strong class="jxr_keyword">throws</strong> ParserConfigurationException, SAXNotRecognizedException, SAXNotSupportedException, SAXException, FileNotFoundException, UnsupportedEncodingException, IOException {
|
||||
<a class="jxr_linenumber" name="L54" href="#L54">54</a> File file = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"hints.xml"</span>);
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> File schema = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"schema/dependency-hint.1.0.xsd"</span>);
|
||||
<a class="jxr_linenumber" name="L55" href="#L55">55</a> File schema = BaseTest.getResourceAsFile(<strong class="jxr_keyword">this</strong>, <span class="jxr_string">"schema/dependency-hint.1.1.xsd"</span>);
|
||||
<a class="jxr_linenumber" name="L56" href="#L56">56</a> HintHandler handler = <strong class="jxr_keyword">new</strong> HintHandler();
|
||||
<a class="jxr_linenumber" name="L57" href="#L57">57</a>
|
||||
<a class="jxr_linenumber" name="L58" href="#L58">58</a> SAXParserFactory factory = SAXParserFactory.newInstance();
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.hints</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.hints</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.hints</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.hints</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.pom</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.pom</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.pom</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.pom</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.suppression</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.suppression</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference Package org.owasp.dependencycheck.xml.suppression</title>
|
||||
<title>Dependency-Check 1.4.3 Reference Package org.owasp.dependencycheck.xml.suppression</title>
|
||||
<link rel="stylesheet" type="text/css" href="../../../../../stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference</title>
|
||||
<title>Dependency-Check 1.4.3 Reference</title>
|
||||
<link rel="stylesheet" type="text/css" href="stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
<html xml:lang="en" lang="en">
|
||||
<head>
|
||||
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
|
||||
<title>Dependency-Check 1.4.2 Reference</title>
|
||||
<title>Dependency-Check 1.4.3 Reference</title>
|
||||
<link rel="stylesheet" type="text/css" href="stylesheet.css" title="style" />
|
||||
</head>
|
||||
<body>
|
||||
@@ -24,7 +24,7 @@
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<h2>Dependency-Check 1.4.2 Reference</h2>
|
||||
<h2>Dependency-Check 1.4.3 Reference</h2>
|
||||
|
||||
<table class="summary">
|
||||
<thead>
|
||||
|
||||
Reference in New Issue
Block a user