Jeremy Long
|
dda6cf728b
|
added suppression for opendj-ldap-sdk to fix issue #165
Former-commit-id: e8dc84bea2350eb5539475cf77650fafb118f3a4
|
2014-11-01 07:08:00 -04:00 |
|
Jeremy Long
|
a7fd410b01
|
stopped trimming org and com off of the groupid so it is consistent with other analyzers
Former-commit-id: c22d3b7af9af00c28ee0df80ba706f70399b80ef
|
2014-11-01 06:51:05 -04:00 |
|
Jeremy Long
|
d281c36733
|
updated suppression rule for jersey-client
Former-commit-id: 81920e19da3c29de46207c2132f225cb8c77a840
|
2014-11-01 06:35:28 -04:00 |
|
Jeremy Long
|
dc91e44c0a
|
added jersey-client 1.11.1 as an optional test dependency
Former-commit-id: d837418656cbfd857adb90662a4d2604fd77a78e
|
2014-11-01 06:35:05 -04:00 |
|
Jeremy Long
|
976eabd527
|
noop
Former-commit-id: 8c867c80dfb8180ba308837a09b33ac17fd8273a
|
2014-10-25 08:08:26 -04:00 |
|
Jeremy Long
|
b6d6a5de2b
|
minor changes to clean up test cases
Former-commit-id: 62d409fa6f50d3bbec881277a4604acca7278faa
|
2014-10-25 08:07:56 -04:00 |
|
Jeremy Long
|
2d58cfe0ce
|
fixed link to the NVD
Former-commit-id: 73ca530e569d4376999c155a8bc1256d935209bf
|
2014-10-25 08:07:20 -04:00 |
|
Jeremy Long
|
9df8bdff5f
|
cleaned up code to use isEmpty instead of "".equals(string)
Former-commit-id: 8469f91a948ab2ab5b0ce61865a0b11cd6d11717
|
2014-10-25 08:06:56 -04:00 |
|
Jeremy Long
|
c86b821951
|
suppressed warning on unchecked cast
Former-commit-id: 633151a31b613071c7bd3e939c6a5c16864b8b88
|
2014-10-25 08:06:15 -04:00 |
|
Jeremy Long
|
4def086bf9
|
removed comments
Former-commit-id: 2c48f5b93a97a0642fbc37edd603b0d0baca4368
|
2014-10-25 08:05:26 -04:00 |
|
Jeremy Long
|
885c890d7d
|
changed the analyzer to use the actual file name rather then the display name
Former-commit-id: 9cc348aaef8fac5e6c64220d94428f168ea8855b
|
2014-10-25 08:05:01 -04:00 |
|
Jeremy Long
|
06060a6694
|
improved error handling of invalid search strings
Former-commit-id: 97250e44b27e009b2480d25f8c2ebb7566038086
|
2014-10-25 08:04:33 -04:00 |
|
Jeremy Long
|
70667814f6
|
changed display name of files contained in archives so that it doesn't look like an invalid path
Former-commit-id: db3a7edadef81dd7e66c68cf0f4cdf43e12936b6
|
2014-10-25 08:03:47 -04:00 |
|
Jeremy Long
|
766b7a940c
|
changed scan methods to return a list of dependencies instead of void
Former-commit-id: f0fd1e06708de3159acff0147968b5508a54fc05
|
2014-10-25 08:02:36 -04:00 |
|
Jeremy Long
|
0c37586357
|
added Xlint:unchecked
Former-commit-id: e26970bf2cd4606b777bddfc806ba74227da9cba
|
2014-10-25 08:00:11 -04:00 |
|
Jeremy Long
|
b4aa55ce1f
|
Merge branch 'master' of github.com:ctrl-alt-dev/DependencyCheck into ctrl-alt-dev-master
Former-commit-id: 4d1ab5ecacf0ca7354f57d3a49accd5a173e0a26
|
2014-10-24 05:36:40 -04:00 |
|
Jeremy Long
|
109443ce77
|
changed the name property of dependencies identified within an archive
Former-commit-id: 5d778afea68c881efea628d9ecc28596d3cbc9d6
|
2014-10-23 06:09:39 -04:00 |
|
Jeremy Long
|
c6f391501d
|
added test case for patch to issue #156
Former-commit-id: 8fa1de0566760a41d65614921f4bb764178151f8
|
2014-10-22 21:43:23 -04:00 |
|
Jeremy Long
|
d1f3105fbd
|
added appropriate sorting to resolve issue #156
Former-commit-id: b5d0dd3e9d337417ea3483b491035009269eaa5c
|
2014-10-22 21:42:51 -04:00 |
|
Jeremy Long
|
8f88ca9d3d
|
corrected compareTo to use file path, not just file name
Former-commit-id: 98e19c402cd5824aed4b3b4923b7ef72359752cf
|
2014-10-22 21:12:40 -04:00 |
|
Erik Hooijmeijer
|
35c2f4873c
|
values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
|
2014-10-21 20:09:54 +02:00 |
|
Jeremy Long
|
1ed7bab375
|
additional updates for issue #162, if no pom is present in the jar, but it exists in the repo the pom from the repo will be used
Former-commit-id: 0d1603f45420b57b00149764acca1fe5bd3f3c83
|
2014-10-17 20:55:58 -04:00 |
|
Jeremy Long
|
f0d1bfb777
|
added an additional suppression for issue #162
Former-commit-id: 9c3403814b15cbcdebdc9e0d43253016548efb23
|
2014-10-16 06:57:24 -04:00 |
|
Jeremy Long
|
42519ac843
|
version 1.2.6-SNAPSHOT
Former-commit-id: 0b301bfa4a942e43976a34195a32982000f34d12
|
2014-10-14 06:28:14 -04:00 |
|
Jeremy Long
|
89a57d4ed3
|
removed velocity-tools to close issue #160
Former-commit-id: 5ca46405a5aa7521bd0a0de54500d848156491a6
|
2014-10-10 06:36:47 -04:00 |
|
Jeremy Long
|
4aad3471af
|
fixed javadoc
Former-commit-id: 2402251f2157864ee3c51dd571cb9d21e17856e6
|
2014-10-08 06:21:20 -04:00 |
|
Jeremy Long
|
92bd305b00
|
version 1.2.5
Former-commit-id: b3fe4ea80c4286684eda15a3b9f46cebc4f09ee8
|
2014-09-16 19:47:17 -04:00 |
|
Jeremy Long
|
83d4a7bc18
|
moved test case dependency,jersey client, to the allTests profile
Former-commit-id: 58da4d9c21803362133f74c168aea256c51a5824
|
2014-09-16 05:24:43 -04:00 |
|
Jeremy Long
|
29595324c4
|
added suppression rules for jersey-client
Former-commit-id: cb8f4081c6d0fc2128a3a3dfda294a541c16adec
|
2014-09-13 07:10:17 -04:00 |
|
Jeremy Long
|
f9064e526f
|
added test jar to the extended profile test dependencies
Former-commit-id: b24966e3936afd9337dbea5476a696ddf46efc65
|
2014-09-13 07:09:54 -04:00 |
|
Jeremy Long
|
93ec2e8639
|
fixed javadoc
Former-commit-id: d06907a74a6fd4cf9ac5e5774af63eda5aba02b3
|
2014-09-13 05:50:49 -04:00 |
|
Jeremy Long
|
0e2a31709a
|
added test cases to ensure setting the base flag will prevent the identifier from being added to the suppressedIdentifiers collection
Former-commit-id: d369797a3b14fc2c42621d273d6f314e968848b9
|
2014-09-13 05:45:05 -04:00 |
|
Jeremy Long
|
c785b39eda
|
added assertion to validate that the base flag is being processed
Former-commit-id: 0364e57af8f548d010f17f948492e9472433c675
|
2014-09-13 05:44:09 -04:00 |
|
Jeremy Long
|
8fab2f58da
|
added the base property and skipped adding the vulnerability or identifier to the suppressed collection if this is a base suppression rule
Former-commit-id: a668d7d8b9345b6ad44bfff1ced4ab783a1f90d8
|
2014-09-13 05:43:16 -04:00 |
|
Jeremy Long
|
e44ee3bfe1
|
added parsing of the base flag
Former-commit-id: 02f533177846bcd4a98b31f851e91f438e1ddeaa
|
2014-09-13 05:42:01 -04:00 |
|
Jeremy Long
|
62065c9d28
|
corrected the removal of an identifier so that iterator.remove was correctly used
Former-commit-id: 252507772242cc7ff42ef9f310cfca3bec7cb075
|
2014-09-13 05:41:26 -04:00 |
|
Jeremy Long
|
c76275275f
|
added the base=true flag to all base suppressions
Former-commit-id: ac77f3fc4ff80c182b7736554a1960e186e67d69
|
2014-09-13 05:40:37 -04:00 |
|
Jeremy Long
|
257f78879d
|
added base attribute to suppression rules
Former-commit-id: bcadbd75b99471a56d604c2f158570305e9b4010
|
2014-09-13 05:40:06 -04:00 |
|
Jeremy Long
|
894263809c
|
added base flag to one suppression entry
Former-commit-id: 7d6bbf36e5e35c2ee2fe8c901281996a34706036
|
2014-09-13 05:39:38 -04:00 |
|
Jeremy Long
|
d4756c9eb8
|
updated base suppression list to include sandbox:sandbox - a php app
Former-commit-id: 087a4c5af2afd03a1d4703d2e1e5a1607a2e7ac9
|
2014-09-12 06:34:23 -04:00 |
|
Jeremy Long
|
0004767775
|
added fix for issue #147 to address springsource, non-core spring, jars being idenified as cpe://a:springsource:springframwork
Former-commit-id: 0a3182123be78a3f450cdef0bcc395907d27730a
|
2014-09-10 17:55:04 -04:00 |
|
Jeremy Long
|
74908642c7
|
added test dependency
Former-commit-id: fa4846dfa384639114f32ed3b7a0d91347b8dabf
|
2014-09-10 17:39:31 -04:00 |
|
Jeremy Long
|
aadfb71c98
|
fixed test case by removing a temporary test entry in DetermineCPE_full
Former-commit-id: 0f91c7b8e1d536c9d15176dc2d9a439da4e8ccdc
|
2014-09-10 17:37:54 -04:00 |
|
Jeremy Long
|
1244af649d
|
updated to improve CPE matching so that if a broad match occured (cpe with no version number) we use the highest confidence version when generating the CPE identifier
Former-commit-id: 6e8c87a71522b1ca7cfa9d72ca419a792d1b17e7
|
2014-09-09 15:10:08 -04:00 |
|
Jeremy Long
|
7bd48cc811
|
updated version analysis to reduce false positives and increase accurate detection
Former-commit-id: 6097160434b7e98182738706790d82cdbd867175
|
2014-09-09 15:07:28 -04:00 |
|
Jeremy Long
|
8f3ce38418
|
re-ordered operations so that a new lucene index is no longer created on each call to calDetermineCPE_full
Former-commit-id: e2af1d893b47afe1ed36d1ab1e6840d47757b509
|
2014-09-07 08:28:44 -04:00 |
|
Jeremy Long
|
1b2d9b4245
|
fixed minor display bug
Former-commit-id: 65e1adcdc7677490907ee6eca68bf1174d355a3c
|
2014-09-07 07:20:45 -04:00 |
|
Jeremy Long
|
c6b2b34fde
|
removed duplicative test of downloading XML
Former-commit-id: 97d1371609af2cc9583b0ac071a8606c93a34fbe
|
2014-09-07 06:59:50 -04:00 |
|
Jeremy Long
|
e58fc13fdb
|
additional looping corrections in determineCPE() to break early if an identifier is found
Former-commit-id: 4ec4ffe598d9870a793da8980bb863633c1967d7
|
2014-09-06 19:09:38 -04:00 |
|
Jeremy Long
|
922d53d2e4
|
Increased the confidence on the pom artifact and groupid
Former-commit-id: b052b50353197e0f7cb419e6f618f2320da11183
|
2014-09-06 19:08:22 -04:00 |
|