diff options
Diffstat (limited to 'eaaf_core_utils/checks/spotbugs-exclude.xml')
| -rw-r--r-- | eaaf_core_utils/checks/spotbugs-exclude.xml | 25 | 
1 files changed, 25 insertions, 0 deletions
| diff --git a/eaaf_core_utils/checks/spotbugs-exclude.xml b/eaaf_core_utils/checks/spotbugs-exclude.xml new file mode 100644 index 00000000..b42f34c2 --- /dev/null +++ b/eaaf_core_utils/checks/spotbugs-exclude.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="UTF-8"?> +<FindBugsFilter> +    <Match> +      <Class name="at.gv.egiz.eaaf.core.impl.utils.EaafSerializationUtils" /> +      <OR> +        <Bug pattern="OBJECT_DESERIALIZATION" />         +      </OR>         +    </Match> +    <Match> +      <!-- Paths and URLs only loaded from configuration --> +      <Class name="at.gv.egiz.eaaf.core.impl.utils.FileUtils" /> +      <OR> +        <Bug pattern="URLCONNECTION_SSRF_FD" />     +        <Bug pattern="PATH_TRAVERSAL_IN" />         +      </OR>         +    </Match> +    <Match> +      <!-- Paths and URLs only loaded from configuration --> +      <Class name="at.gv.egiz.eaaf.core.impl.utils.KeyStoreUtils" /> +      <OR> +        <Bug pattern="URLCONNECTION_SSRF_FD" /> +        <Bug pattern="PATH_TRAVERSAL_IN" />         +      </OR>         +    </Match>     +</FindBugsFilter>
\ No newline at end of file | 
