<?xml version="1.0" encoding="UTF-8"?> <FindBugsFilter> <Match> <!-- bPK requires SHA1 from specification --> <Class name="at.gv.egiz.eaaf.core.impl.builder.BpkBuilder" /> <OR> <Bug pattern="WEAK_MESSAGE_DIGEST_SHA1" /> </OR> </Match> <Match> <Class name="at.gv.egiz.eaaf.core.impl.utils.EaafSerializationUtils" /> <OR> <Bug pattern="OBJECT_DESERIALIZATION" /> </OR> </Match> <Match> <!-- Paths and URLs only loaded from configuration --> <Class name="at.gv.egiz.eaaf.core.impl.utils.FileUtils" /> <OR> <Bug pattern="URLCONNECTION_SSRF_FD" /> <Bug pattern="PATH_TRAVERSAL_IN" /> </OR> </Match> <Match> <!-- Paths and URLs only loaded from configuration --> <Class name="at.gv.egiz.eaaf.core.impl.utils.KeyStoreUtils" /> <OR> <Bug pattern="URLCONNECTION_SSRF_FD" /> <Bug pattern="PATH_TRAVERSAL_IN" /> </OR> </Match> </FindBugsFilter>