-
Notifications
You must be signed in to change notification settings - Fork 19
/
Copy pathspotbugs-excludes.xml
119 lines (97 loc) · 2.68 KB
/
spotbugs-excludes.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter xmlns="https://github.com/spotbugs/filter/3.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="https://github.com/spotbugs/filter/3.0.0 https://raw.githubusercontent.com/spotbugs/spotbugs/3.1.0/spotbugs/etc/findbugsfilter.xsd">
<!-- suppressing path in traversal - too many safe? usages for now -->
<Match>
<Bug pattern="PATH_TRAVERSAL_IN"/>
</Match>
<!-- suppressing warning in QS Architect -->
<Match>
<Bug pattern="COMMAND_INJECTION" />
<Package name="~deltix[.]installer.admin.*"/>
</Match>
<!-- suppressing warning in QS Solution Generator -->
<Match>
<Bug pattern="COMMAND_INJECTION" />
<Package name="~deltix[.]qsrv.cg.*"/>
</Match>
<Match>
<Bug pattern="PATH_TRAVERSAL_OUT"/>
</Match>
<Match>
<Bug pattern="UNENCRYPTED_SERVER_SOCKET"/>
</Match>
<!-- excluding installer (at least initially) - not a part of standard installation -->
<Match>
<Package name="deltix.installer.*"/>
</Match>
<!-- excluding QS Admin process launchers -->
<Match>
<Class name="~deltix\.installer\.admin\..*"/>
<Bug pattern="COMMAND_INJECTION"/>
</Match>
<!-- excluding License Server (at least initially) - not a part of standard install -->
<Match>
<Package name="deltix.lsrv.impl"/>
</Match>
<!-- consider deleting SNMP webapp -->
<Match>
<Package name="deltix.snmp.mond.servlet"/>
</Match>
<!-- compiled jsp pages -->
<Match>
<Package name="~org[.]apache.jsp.*"/>
</Match>
<Match>
<Package name="deltix.snmp.mond.web"/>
</Match>
<!-- exclude code generator (not a part of runtime)
<Match>
<Package name="deltix.codegen.*"/>
</Match>
<Match>
<Package name="deltix.efix.generator.*"/>
</Match>
<Match>
<Class name="~.*_jmhTest"/>
</Match>
<Match>
<Class name="~.*_jmhType_.*"/>
</Match>
-->
<!-- exclude lower ranked issues -->
<Match>
<Rank value="10"/>
</Match>
<Match>
<Rank value="11"/>
</Match>
<Match>
<Rank value="12"/>
</Match>
<Match>
<Rank value="13"/>
</Match>
<Match>
<Rank value="14"/>
</Match>
<Match>
<Rank value="15"/>
</Match>
<Match>
<Rank value="16"/>
</Match>
<Match>
<Rank value="17"/>
</Match>
<Match>
<Rank value="18"/>
</Match>
<Match>
<Rank value="19"/>
</Match>
<Match>
<Rank value="20"/>
</Match>
</FindBugsFilter>