Jeremy Long
|
d1f3105fbd
|
added appropriate sorting to resolve issue #156
Former-commit-id: b5d0dd3e9d337417ea3483b491035009269eaa5c
|
2014-10-22 21:42:51 -04:00 |
|
Jeremy Long
|
8f88ca9d3d
|
corrected compareTo to use file path, not just file name
Former-commit-id: 98e19c402cd5824aed4b3b4923b7ef72359752cf
|
2014-10-22 21:12:40 -04:00 |
|
Jeremy Long
|
1ed7bab375
|
additional updates for issue #162, if no pom is present in the jar, but it exists in the repo the pom from the repo will be used
Former-commit-id: 0d1603f45420b57b00149764acca1fe5bd3f3c83
|
2014-10-17 20:55:58 -04:00 |
|
Jeremy Long
|
f0d1bfb777
|
added an additional suppression for issue #162
Former-commit-id: 9c3403814b15cbcdebdc9e0d43253016548efb23
|
2014-10-16 06:57:24 -04:00 |
|
Jeremy Long
|
42519ac843
|
version 1.2.6-SNAPSHOT
Former-commit-id: 0b301bfa4a942e43976a34195a32982000f34d12
|
2014-10-14 06:28:14 -04:00 |
|
Jeremy Long
|
89a57d4ed3
|
removed velocity-tools to close issue #160
Former-commit-id: 5ca46405a5aa7521bd0a0de54500d848156491a6
|
2014-10-10 06:36:47 -04:00 |
|
Jeremy Long
|
4aad3471af
|
fixed javadoc
Former-commit-id: 2402251f2157864ee3c51dd571cb9d21e17856e6
|
2014-10-08 06:21:20 -04:00 |
|
Jeremy Long
|
92bd305b00
|
version 1.2.5
Former-commit-id: b3fe4ea80c4286684eda15a3b9f46cebc4f09ee8
|
2014-09-16 19:47:17 -04:00 |
|
Jeremy Long
|
83d4a7bc18
|
moved test case dependency,jersey client, to the allTests profile
Former-commit-id: 58da4d9c21803362133f74c168aea256c51a5824
|
2014-09-16 05:24:43 -04:00 |
|
Jeremy Long
|
29595324c4
|
added suppression rules for jersey-client
Former-commit-id: cb8f4081c6d0fc2128a3a3dfda294a541c16adec
|
2014-09-13 07:10:17 -04:00 |
|
Jeremy Long
|
f9064e526f
|
added test jar to the extended profile test dependencies
Former-commit-id: b24966e3936afd9337dbea5476a696ddf46efc65
|
2014-09-13 07:09:54 -04:00 |
|
Jeremy Long
|
93ec2e8639
|
fixed javadoc
Former-commit-id: d06907a74a6fd4cf9ac5e5774af63eda5aba02b3
|
2014-09-13 05:50:49 -04:00 |
|
Jeremy Long
|
0e2a31709a
|
added test cases to ensure setting the base flag will prevent the identifier from being added to the suppressedIdentifiers collection
Former-commit-id: d369797a3b14fc2c42621d273d6f314e968848b9
|
2014-09-13 05:45:05 -04:00 |
|
Jeremy Long
|
c785b39eda
|
added assertion to validate that the base flag is being processed
Former-commit-id: 0364e57af8f548d010f17f948492e9472433c675
|
2014-09-13 05:44:09 -04:00 |
|
Jeremy Long
|
8fab2f58da
|
added the base property and skipped adding the vulnerability or identifier to the suppressed collection if this is a base suppression rule
Former-commit-id: a668d7d8b9345b6ad44bfff1ced4ab783a1f90d8
|
2014-09-13 05:43:16 -04:00 |
|
Jeremy Long
|
e44ee3bfe1
|
added parsing of the base flag
Former-commit-id: 02f533177846bcd4a98b31f851e91f438e1ddeaa
|
2014-09-13 05:42:01 -04:00 |
|
Jeremy Long
|
62065c9d28
|
corrected the removal of an identifier so that iterator.remove was correctly used
Former-commit-id: 252507772242cc7ff42ef9f310cfca3bec7cb075
|
2014-09-13 05:41:26 -04:00 |
|
Jeremy Long
|
c76275275f
|
added the base=true flag to all base suppressions
Former-commit-id: ac77f3fc4ff80c182b7736554a1960e186e67d69
|
2014-09-13 05:40:37 -04:00 |
|
Jeremy Long
|
257f78879d
|
added base attribute to suppression rules
Former-commit-id: bcadbd75b99471a56d604c2f158570305e9b4010
|
2014-09-13 05:40:06 -04:00 |
|
Jeremy Long
|
894263809c
|
added base flag to one suppression entry
Former-commit-id: 7d6bbf36e5e35c2ee2fe8c901281996a34706036
|
2014-09-13 05:39:38 -04:00 |
|
Jeremy Long
|
d4756c9eb8
|
updated base suppression list to include sandbox:sandbox - a php app
Former-commit-id: 087a4c5af2afd03a1d4703d2e1e5a1607a2e7ac9
|
2014-09-12 06:34:23 -04:00 |
|
Jeremy Long
|
0004767775
|
added fix for issue #147 to address springsource, non-core spring, jars being idenified as cpe://a:springsource:springframwork
Former-commit-id: 0a3182123be78a3f450cdef0bcc395907d27730a
|
2014-09-10 17:55:04 -04:00 |
|
Jeremy Long
|
74908642c7
|
added test dependency
Former-commit-id: fa4846dfa384639114f32ed3b7a0d91347b8dabf
|
2014-09-10 17:39:31 -04:00 |
|
Jeremy Long
|
aadfb71c98
|
fixed test case by removing a temporary test entry in DetermineCPE_full
Former-commit-id: 0f91c7b8e1d536c9d15176dc2d9a439da4e8ccdc
|
2014-09-10 17:37:54 -04:00 |
|
Jeremy Long
|
1244af649d
|
updated to improve CPE matching so that if a broad match occured (cpe with no version number) we use the highest confidence version when generating the CPE identifier
Former-commit-id: 6e8c87a71522b1ca7cfa9d72ca419a792d1b17e7
|
2014-09-09 15:10:08 -04:00 |
|
Jeremy Long
|
7bd48cc811
|
updated version analysis to reduce false positives and increase accurate detection
Former-commit-id: 6097160434b7e98182738706790d82cdbd867175
|
2014-09-09 15:07:28 -04:00 |
|
Jeremy Long
|
8f3ce38418
|
re-ordered operations so that a new lucene index is no longer created on each call to calDetermineCPE_full
Former-commit-id: e2af1d893b47afe1ed36d1ab1e6840d47757b509
|
2014-09-07 08:28:44 -04:00 |
|
Jeremy Long
|
1b2d9b4245
|
fixed minor display bug
Former-commit-id: 65e1adcdc7677490907ee6eca68bf1174d355a3c
|
2014-09-07 07:20:45 -04:00 |
|
Jeremy Long
|
c6b2b34fde
|
removed duplicative test of downloading XML
Former-commit-id: 97d1371609af2cc9583b0ac071a8606c93a34fbe
|
2014-09-07 06:59:50 -04:00 |
|
Jeremy Long
|
e58fc13fdb
|
additional looping corrections in determineCPE() to break early if an identifier is found
Former-commit-id: 4ec4ffe598d9870a793da8980bb863633c1967d7
|
2014-09-06 19:09:38 -04:00 |
|
Jeremy Long
|
922d53d2e4
|
Increased the confidence on the pom artifact and groupid
Former-commit-id: b052b50353197e0f7cb419e6f618f2320da11183
|
2014-09-06 19:08:22 -04:00 |
|
Jeremy Long
|
fec53b3951
|
corrected looping in determineCPE()
Former-commit-id: 329f20687223f38273b2e23601b05fcea2b9122f
|
2014-09-06 06:37:12 -04:00 |
|
Jeremy Long
|
da20fb2922
|
added velocity-tools to base suppression as it should not be reported as struts
Former-commit-id: 4649d95a091def05ae249da42aa7d6f845b14d59
|
2014-08-30 07:48:02 -04:00 |
|
Jeremy Long
|
4095c5da38
|
made serializable
Former-commit-id: 27d8084ea981766791df05c5e9ef61dbe40ba32c
|
2014-08-16 07:27:28 -04:00 |
|
Jeremy Long
|
b4405ebf3e
|
minor changes to the TOC table - removed # of related dependencies and renamed CVE Impact to Highest Severity to clear up ambiguity
Former-commit-id: b8b14ab120d889057864eb6f93cadad9773b9171
|
2014-08-15 05:58:10 -04:00 |
|
Jeremy Long
|
d3bff2f39d
|
version 1.2.5-SNAPSHOT
Former-commit-id: 85ed1238022348f1e9496ffe3c95d4ff8e3d09c3
|
2014-08-05 18:55:30 -04:00 |
|
Jeremy Long
|
f2272730ac
|
version 1.2.4
Former-commit-id: 4de7e508eb1885bb72e866960fa5402f72bf8e49
|
2014-08-05 18:45:36 -04:00 |
|
Jeremy Long
|
56b447493e
|
added additional error messages about the proxy if the download fails per issue #136
Former-commit-id: 7a5dcc58ab959a70b7e086a984f5d9289d749b99
|
2014-08-05 10:58:43 -04:00 |
|
Jeremy Long
|
e45b68eda7
|
fixed issue #140 - false positive is now suppressed
Former-commit-id: 4b584884e1eb5efa214b1af87d555e6866db917a
|
2014-08-05 10:44:33 -04:00 |
|
Jeremy Long
|
bd955cda06
|
improved TOC per issue #138
Former-commit-id: 7cc7ccb9d0dd8257588438220bf61d78caa2bcec
|
2014-08-05 09:22:28 -04:00 |
|
Jeremy Long
|
c6dbc01912
|
ensured FileInputStream is correctly closed
Former-commit-id: 6e0362476f456e5af07e686fdccf04e600a97de8
|
2014-08-05 09:19:35 -04:00 |
|
Jeremy Long
|
fabe1aa940
|
checkstyle corrections
Former-commit-id: d23c5d17629f8484c1c07d328c9c1b74a678e062
|
2014-08-05 09:19:00 -04:00 |
|
Jeremy Long
|
ba5dbb94b8
|
removed fully qualified class name from jaxb instantiation
Former-commit-id: 15d5f9e2013daba62f7e32618958743e87e8ea79
|
2014-08-05 09:18:35 -04:00 |
|
Jeremy Long
|
cf21dfaa3a
|
changed warning log message
Former-commit-id: 9a7fd59cd15e627ed103a6e797bc47518805276b
|
2014-08-04 08:05:31 -04:00 |
|
Jeremy Long
|
54ceb630de
|
fixed project descriptions and corrected site deployment issues
Former-commit-id: 39373b0805b84b99c3e84dbad1c8a2301f277221
|
2014-08-04 06:24:00 -04:00 |
|
Jeremy Long
|
f6eef54566
|
added fix for issue #136
Former-commit-id: c259a419769b41e138d3cbb3811f1c24652601d5
|
2014-08-01 15:09:41 -04:00 |
|
Jeremy Long
|
0b06b194b0
|
added XmlRootElement attribute
Former-commit-id: a3263e63c8c7b12c90ad388c8eda1ab09e43786c
|
2014-08-01 14:22:40 -04:00 |
|
Jeremy Long
|
73f6ce304c
|
corrected jaxb newInstance
Former-commit-id: 32a1b759ad1e127784ae9bff902cca01c6faaad7
|
2014-08-01 14:21:55 -04:00 |
|
Jeremy Long
|
3565098650
|
converted abstract class to a final class with a private constructor
Former-commit-id: 582a421e69eac2bfc008ca8ee2fe88c7734c9a31
|
2014-07-20 06:36:33 -04:00 |
|
Jeremy Long
|
803fcf146b
|
minor fix to test case
Former-commit-id: bf20319aed4f100d124cdeb7abeafe6598778891
|
2014-07-19 13:58:30 -04:00 |
|