From efeb084e57f33734954cf1f1451ea61b257e296b Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Fri, 10 Mar 2017 06:51:53 -0500
Subject: [PATCH] added suppression rule for jcore per issue #679

---
 .../dependencycheck-base-suppression.xml      | 29 ++++++++++++-------
 1 file changed, 18 insertions(+), 11 deletions(-)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index bc2e4f9da..4f3d88573 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -495,12 +495,12 @@
         <cpe>cpe:/a:shim_project:shim</cpe>
     </suppress>
     <suppress base="true">
-       <notes><![CDATA[
+        <notes><![CDATA[
        False positives on python.
        ]]></notes>
-       <filePath regex="true">.*__init__\.py$</filePath>
-       <cpe>cpe:/a:shim:shim</cpe>
-       <cpe>cpe:/a:python:python</cpe>
+        <filePath regex="true">.*__init__\.py$</filePath>
+        <cpe>cpe:/a:shim:shim</cpe>
+        <cpe>cpe:/a:python:python</cpe>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[
@@ -510,19 +510,19 @@
         <cpe>cpe:/a:checkpoint:check_point</cpe>
     </suppress>
     <suppress base="true">
-       <notes><![CDATA[
+        <notes><![CDATA[
        Bouncy Castle Time Stamp Protocol is not related to openpgp.
        ]]></notes>
-       <gav regex="true">^org\.bouncycastle:bctsp.*$</gav>
-       <cpe>cpe:/a:openpgp:openpgp</cpe>
-       <cpe>cpe:/a:pgp:openpgp</cpe>
+        <gav regex="true">^org\.bouncycastle:bctsp.*$</gav>
+        <cpe>cpe:/a:openpgp:openpgp</cpe>
+        <cpe>cpe:/a:pgp:openpgp</cpe>
     </suppress>
     <suppress base="true">
-       <notes><![CDATA[
+        <notes><![CDATA[
        Apache XML Graphics is used by Batik - but should not be identified as batik.
        ]]></notes>
-       <gav regex="true">^org\.apache\.xmlgraphics:xmlgraphics-commons:.*$</gav>
-       <cpe>cpe:/a:apache:batik</cpe>
+        <gav regex="true">^org\.apache\.xmlgraphics:xmlgraphics-commons:.*$</gav>
+        <cpe>cpe:/a:apache:batik</cpe>
     </suppress>
     <suppress base="true">
         <notes><![CDATA[
@@ -531,4 +531,11 @@
         <gav regex="true">^io\.jsonwebtoken:jjwt:.*$</gav>
         <cpe>cpe:/a:sonatype:nexus</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        False positive suppresion per issue #679 - jcore is a php wbe cms.
+        ]]></notes>
+        <gav regex="true">^org\.apache\.james:apache-mime4j-core:.*$</gav>
+        <cpe>cpe:/a:jcore:jcore</cpe>
+    </suppress>
 </suppressions>