| commit | 14bab9c3897c4290a4f23cbc0d86b48f0fdee43e | [log] [tgz] |
|---|---|---|
| author | Udo Schnurpfeil <lofwyr@apache.org> | Wed Jan 24 12:21:48 2018 +0000 |
| committer | Udo Schnurpfeil <lofwyr@apache.org> | Wed Jan 24 12:21:48 2018 +0000 |
| tree | bb564b667ff97862409c81fb3a0b523bc274f69f | |
| parent | 9aa347e4313360b1c1c3a2f1c087d29c0bbed9c7 [diff] |
suppress CVE which comes from myfaces, not tobago
diff --git a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.0.xml b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.0.xml index a973e7d..5a5caf6 100644 --- a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.0.xml +++ b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.0.xml
@@ -28,4 +28,9 @@ <gav regex="true">^org\.apache\.myfaces\.tobago:.*:.*$</gav> <cve>CVE-2016-5019</cve> </suppress> + <suppress> + <notes><![CDATA[ subject of CVE is MyFaces Core, but not Tobago ]]></notes> + <gav regex="true">^org\.apache\.myfaces\.tobago:.*:.*$</gav> + <cve>CVE-2011-4343</cve> + </suppress> </suppressions>