<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter>
    <Match>
      <!-- bPK requires SHA1 from specification -->
      <Class name="at.gv.egiz.eaaf.core.impl.builder.BpkBuilder" />
      <OR>
        <Bug pattern="WEAK_MESSAGE_DIGEST_SHA1" />        
      </OR>        
    </Match>
    <Match>
      <Class name="at.gv.egiz.eaaf.core.impl.utils.EaafSerializationUtils" />
      <OR>
        <Bug pattern="OBJECT_DESERIALIZATION" />        
      </OR>        
    </Match>
    <Match>
      <!-- Paths and URLs only loaded from configuration -->
      <Class name="at.gv.egiz.eaaf.core.impl.utils.FileUtils" />
      <OR>
        <Bug pattern="URLCONNECTION_SSRF_FD" />    
        <Bug pattern="PATH_TRAVERSAL_IN" />        
      </OR>        
    </Match>
    <Match>
      <!-- Paths and URLs only loaded from configuration -->
      <Class name="at.gv.egiz.eaaf.core.impl.utils.KeyStoreUtils" />
      <OR>
        <Bug pattern="URLCONNECTION_SSRF_FD" />
        <Bug pattern="PATH_TRAVERSAL_IN" />        
      </OR>        
    </Match>    
</FindBugsFilter>