hostsharing/hs.hsadmin.ng
1
0
Fork 0
Code Activity

add OWASP dependencyCheck

Browse Source
This commit is contained in:
Michael Hoennig
2022-08-04 12:26:41 +02:00
parent d9ee0017dd
commit 80b1e0ff25
3 changed files with 39 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
etc/owasp-dependency-check-suppression.xml Normal file
View File

@ -0,0 +1,10 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
We don't use the Spring HTTP invoker which causes this vulnerability due to Java deserialization.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.springframework/spring-web@.*$</packageUrl>
<cve>CVE-2016-1000027</cve>
</suppress>
</suppressions>