Jeremy Long
|
d281c36733
|
updated suppression rule for jersey-client
Former-commit-id: 81920e19da3c29de46207c2132f225cb8c77a840
|
2014-11-01 06:35:28 -04:00 |
|
Jeremy Long
|
2d58cfe0ce
|
fixed link to the NVD
Former-commit-id: 73ca530e569d4376999c155a8bc1256d935209bf
|
2014-10-25 08:07:20 -04:00 |
|
Jeremy Long
|
9df8bdff5f
|
cleaned up code to use isEmpty instead of "".equals(string)
Former-commit-id: 8469f91a948ab2ab5b0ce61865a0b11cd6d11717
|
2014-10-25 08:06:56 -04:00 |
|
Jeremy Long
|
c86b821951
|
suppressed warning on unchecked cast
Former-commit-id: 633151a31b613071c7bd3e939c6a5c16864b8b88
|
2014-10-25 08:06:15 -04:00 |
|
Jeremy Long
|
4def086bf9
|
removed comments
Former-commit-id: 2c48f5b93a97a0642fbc37edd603b0d0baca4368
|
2014-10-25 08:05:26 -04:00 |
|
Jeremy Long
|
885c890d7d
|
changed the analyzer to use the actual file name rather then the display name
Former-commit-id: 9cc348aaef8fac5e6c64220d94428f168ea8855b
|
2014-10-25 08:05:01 -04:00 |
|
Jeremy Long
|
06060a6694
|
improved error handling of invalid search strings
Former-commit-id: 97250e44b27e009b2480d25f8c2ebb7566038086
|
2014-10-25 08:04:33 -04:00 |
|
Jeremy Long
|
70667814f6
|
changed display name of files contained in archives so that it doesn't look like an invalid path
Former-commit-id: db3a7edadef81dd7e66c68cf0f4cdf43e12936b6
|
2014-10-25 08:03:47 -04:00 |
|
Jeremy Long
|
766b7a940c
|
changed scan methods to return a list of dependencies instead of void
Former-commit-id: f0fd1e06708de3159acff0147968b5508a54fc05
|
2014-10-25 08:02:36 -04:00 |
|
Jeremy Long
|
b4aa55ce1f
|
Merge branch 'master' of github.com:ctrl-alt-dev/DependencyCheck into ctrl-alt-dev-master
Former-commit-id: 4d1ab5ecacf0ca7354f57d3a49accd5a173e0a26
|
2014-10-24 05:36:40 -04:00 |
|
Jeremy Long
|
109443ce77
|
changed the name property of dependencies identified within an archive
Former-commit-id: 5d778afea68c881efea628d9ecc28596d3cbc9d6
|
2014-10-23 06:09:39 -04:00 |
|
Jeremy Long
|
d1f3105fbd
|
added appropriate sorting to resolve issue #156
Former-commit-id: b5d0dd3e9d337417ea3483b491035009269eaa5c
|
2014-10-22 21:42:51 -04:00 |
|
Jeremy Long
|
8f88ca9d3d
|
corrected compareTo to use file path, not just file name
Former-commit-id: 98e19c402cd5824aed4b3b4923b7ef72359752cf
|
2014-10-22 21:12:40 -04:00 |
|
Erik Hooijmeijer
|
35c2f4873c
|
values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
|
2014-10-21 20:09:54 +02:00 |
|
Jeremy Long
|
1ed7bab375
|
additional updates for issue #162, if no pom is present in the jar, but it exists in the repo the pom from the repo will be used
Former-commit-id: 0d1603f45420b57b00149764acca1fe5bd3f3c83
|
2014-10-17 20:55:58 -04:00 |
|
Jeremy Long
|
f0d1bfb777
|
added an additional suppression for issue #162
Former-commit-id: 9c3403814b15cbcdebdc9e0d43253016548efb23
|
2014-10-16 06:57:24 -04:00 |
|
Jeremy Long
|
4aad3471af
|
fixed javadoc
Former-commit-id: 2402251f2157864ee3c51dd571cb9d21e17856e6
|
2014-10-08 06:21:20 -04:00 |
|
Jeremy Long
|
29595324c4
|
added suppression rules for jersey-client
Former-commit-id: cb8f4081c6d0fc2128a3a3dfda294a541c16adec
|
2014-09-13 07:10:17 -04:00 |
|
Jeremy Long
|
8fab2f58da
|
added the base property and skipped adding the vulnerability or identifier to the suppressed collection if this is a base suppression rule
Former-commit-id: a668d7d8b9345b6ad44bfff1ced4ab783a1f90d8
|
2014-09-13 05:43:16 -04:00 |
|
Jeremy Long
|
e44ee3bfe1
|
added parsing of the base flag
Former-commit-id: 02f533177846bcd4a98b31f851e91f438e1ddeaa
|
2014-09-13 05:42:01 -04:00 |
|
Jeremy Long
|
62065c9d28
|
corrected the removal of an identifier so that iterator.remove was correctly used
Former-commit-id: 252507772242cc7ff42ef9f310cfca3bec7cb075
|
2014-09-13 05:41:26 -04:00 |
|
Jeremy Long
|
c76275275f
|
added the base=true flag to all base suppressions
Former-commit-id: ac77f3fc4ff80c182b7736554a1960e186e67d69
|
2014-09-13 05:40:37 -04:00 |
|
Jeremy Long
|
257f78879d
|
added base attribute to suppression rules
Former-commit-id: bcadbd75b99471a56d604c2f158570305e9b4010
|
2014-09-13 05:40:06 -04:00 |
|
Jeremy Long
|
d4756c9eb8
|
updated base suppression list to include sandbox:sandbox - a php app
Former-commit-id: 087a4c5af2afd03a1d4703d2e1e5a1607a2e7ac9
|
2014-09-12 06:34:23 -04:00 |
|
Jeremy Long
|
0004767775
|
added fix for issue #147 to address springsource, non-core spring, jars being idenified as cpe://a:springsource:springframwork
Former-commit-id: 0a3182123be78a3f450cdef0bcc395907d27730a
|
2014-09-10 17:55:04 -04:00 |
|
Jeremy Long
|
1244af649d
|
updated to improve CPE matching so that if a broad match occured (cpe with no version number) we use the highest confidence version when generating the CPE identifier
Former-commit-id: 6e8c87a71522b1ca7cfa9d72ca419a792d1b17e7
|
2014-09-09 15:10:08 -04:00 |
|
Jeremy Long
|
7bd48cc811
|
updated version analysis to reduce false positives and increase accurate detection
Former-commit-id: 6097160434b7e98182738706790d82cdbd867175
|
2014-09-09 15:07:28 -04:00 |
|
Jeremy Long
|
1b2d9b4245
|
fixed minor display bug
Former-commit-id: 65e1adcdc7677490907ee6eca68bf1174d355a3c
|
2014-09-07 07:20:45 -04:00 |
|
Jeremy Long
|
e58fc13fdb
|
additional looping corrections in determineCPE() to break early if an identifier is found
Former-commit-id: 4ec4ffe598d9870a793da8980bb863633c1967d7
|
2014-09-06 19:09:38 -04:00 |
|
Jeremy Long
|
922d53d2e4
|
Increased the confidence on the pom artifact and groupid
Former-commit-id: b052b50353197e0f7cb419e6f618f2320da11183
|
2014-09-06 19:08:22 -04:00 |
|
Jeremy Long
|
fec53b3951
|
corrected looping in determineCPE()
Former-commit-id: 329f20687223f38273b2e23601b05fcea2b9122f
|
2014-09-06 06:37:12 -04:00 |
|
Jeremy Long
|
da20fb2922
|
added velocity-tools to base suppression as it should not be reported as struts
Former-commit-id: 4649d95a091def05ae249da42aa7d6f845b14d59
|
2014-08-30 07:48:02 -04:00 |
|
Jeremy Long
|
4095c5da38
|
made serializable
Former-commit-id: 27d8084ea981766791df05c5e9ef61dbe40ba32c
|
2014-08-16 07:27:28 -04:00 |
|
Jeremy Long
|
b4405ebf3e
|
minor changes to the TOC table - removed # of related dependencies and renamed CVE Impact to Highest Severity to clear up ambiguity
Former-commit-id: b8b14ab120d889057864eb6f93cadad9773b9171
|
2014-08-15 05:58:10 -04:00 |
|
Jeremy Long
|
56b447493e
|
added additional error messages about the proxy if the download fails per issue #136
Former-commit-id: 7a5dcc58ab959a70b7e086a984f5d9289d749b99
|
2014-08-05 10:58:43 -04:00 |
|
Jeremy Long
|
e45b68eda7
|
fixed issue #140 - false positive is now suppressed
Former-commit-id: 4b584884e1eb5efa214b1af87d555e6866db917a
|
2014-08-05 10:44:33 -04:00 |
|
Jeremy Long
|
bd955cda06
|
improved TOC per issue #138
Former-commit-id: 7cc7ccb9d0dd8257588438220bf61d78caa2bcec
|
2014-08-05 09:22:28 -04:00 |
|
Jeremy Long
|
c6dbc01912
|
ensured FileInputStream is correctly closed
Former-commit-id: 6e0362476f456e5af07e686fdccf04e600a97de8
|
2014-08-05 09:19:35 -04:00 |
|
Jeremy Long
|
fabe1aa940
|
checkstyle corrections
Former-commit-id: d23c5d17629f8484c1c07d328c9c1b74a678e062
|
2014-08-05 09:19:00 -04:00 |
|
Jeremy Long
|
ba5dbb94b8
|
removed fully qualified class name from jaxb instantiation
Former-commit-id: 15d5f9e2013daba62f7e32618958743e87e8ea79
|
2014-08-05 09:18:35 -04:00 |
|
Jeremy Long
|
cf21dfaa3a
|
changed warning log message
Former-commit-id: 9a7fd59cd15e627ed103a6e797bc47518805276b
|
2014-08-04 08:05:31 -04:00 |
|
Jeremy Long
|
f6eef54566
|
added fix for issue #136
Former-commit-id: c259a419769b41e138d3cbb3811f1c24652601d5
|
2014-08-01 15:09:41 -04:00 |
|
Jeremy Long
|
0b06b194b0
|
added XmlRootElement attribute
Former-commit-id: a3263e63c8c7b12c90ad388c8eda1ab09e43786c
|
2014-08-01 14:22:40 -04:00 |
|
Jeremy Long
|
73f6ce304c
|
corrected jaxb newInstance
Former-commit-id: 32a1b759ad1e127784ae9bff902cca01c6faaad7
|
2014-08-01 14:21:55 -04:00 |
|
Jeremy Long
|
3565098650
|
converted abstract class to a final class with a private constructor
Former-commit-id: 582a421e69eac2bfc008ca8ee2fe88c7734c9a31
|
2014-07-20 06:36:33 -04:00 |
|
Jeremy Long
|
034a274b07
|
fixed copy paste error
Former-commit-id: 83c51cb5b43c635088025a2076121911af32a7ec
|
2014-07-19 13:57:15 -04:00 |
|
Jeremy Long
|
718d7af8bc
|
updated to use the new getConnectionString implementation
Former-commit-id: c5bd68b3d2fb4c2470d6c50dc5f8f9f6036b9fce
|
2014-07-19 07:38:51 -04:00 |
|
Jeremy Long
|
f28b566992
|
added data.file_name and data.version
Former-commit-id: e692a13a216ec6808e3fd92397fd3c50854cfa56
|
2014-07-19 07:37:11 -04:00 |
|
Jeremy Long
|
46702bbb5c
|
moved checkSumTest.file, checksum.java, and checksumTest.java to dependency-check-utils
Former-commit-id: 0c05e466b5fe071ca55552660d471431572c0558
|
2014-07-17 06:03:21 -04:00 |
|
Jeremy Long
|
5600c9bc69
|
removed commented out property
Former-commit-id: 2a07ced007c986d3ab127d8ff216f49c332f41c3
|
2014-07-17 06:01:59 -04:00 |
|