/
spotbugs-excludes.xml
100 lines (100 loc) · 4.67 KB
/
spotbugs-excludes.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter>
<!--
Exclusions in this section have been triaged and determined to be false positives.
-->
<Match>
<Or>
<!-- We don't care about this behavior -->
<Bug pattern="CRLF_INJECTION_LOGS"/>
<!-- Jenkins handles this issue differently or doesn't care about it. -->
<Bug pattern="INFORMATION_EXPOSURE_THROUGH_AN_ERROR_MESSAGE"/>
</Or>
</Match>
<!--
Here lies technical debt. Exclusions in this section have not yet been triaged. When working on
on this section, pick an exclusion to triage, then:
- If it is a false positive, add a @SuppressFBWarnings(value = "[…]", justification = "[…]")
annotation indicating the reason why it is a false positive, then remove the exclusion from
this section.
- If it is not a false positive, fix the bug, then remove the exclusion from this section.
-->
<Match>
<Confidence value="2"/>
<Or>
<And>
<Bug pattern="EI_EXPOSE_REP"/>
<Or>
<Class name="org.kohsuke.stapler.compression.CompressionServletResponse"/>
<Class name="org.kohsuke.stapler.framework.AbstractWebAppMain"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyClosureScript"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyFacet"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyServerPageScript"/>
<Class name="org.kohsuke.stapler.jelly.groovy.JellyBuilder"/>
<Class name="org.kohsuke.stapler.jelly.JellyFacet"/>
<Class name="org.kohsuke.stapler.MetaClass"/>
<Class name="org.kohsuke.stapler.RequestImpl"/>
<Class name="org.kohsuke.stapler.ResponseImpl"/>
<Class name="org.kohsuke.stapler.Stapler"/>
<Class name="org.kohsuke.stapler.StaplerResponseWrapper"/>
<Class name="org.kohsuke.stapler.WebApp"/>
</Or>
</And>
<And>
<Bug pattern="EI_EXPOSE_REP2"/>
<Or>
<Class name="org.kohsuke.stapler.compression.FilterServletOutputStream"/>
<Class name="org.kohsuke.stapler.export.SchemaGenerator"/>
<Class name="org.kohsuke.stapler.framework.adjunct.AdjunctManager"/>
<Class name="org.kohsuke.stapler.framework.io.WriterOutputStream"/>
<Class name="org.kohsuke.stapler.interceptor.JsonOutputFilter$FilterPropertyFilter"/>
<Class name="org.kohsuke.stapler.jelly.CustomTagLibrary"/>
<Class name="org.kohsuke.stapler.jelly.FindAncestorTag"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyClassLoaderTearOff"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyClosureScript"/>
<Class name="org.kohsuke.stapler.jelly.groovy.JellyBuilder"/>
<Class name="org.kohsuke.stapler.jelly.JellyClassLoaderTearOff"/>
<Class name="org.kohsuke.stapler.json.JsonHttpResponse"/>
<Class name="org.kohsuke.stapler.ResponseImpl"/>
<Class name="org.kohsuke.stapler.StaplerResponseWrapper"/>
<Class name="org.kohsuke.stapler.WebApp"/>
</Or>
</And>
<And>
<Bug pattern="SSD_DO_NOT_USE_INSTANCE_LOCK_ON_SHARED_STATIC_DATA"/>
<Class name="org.kohsuke.stapler.EvaluationTrace$ApplicationTracer"/>
</And>
<And>
<Bug pattern="THROWS_METHOD_THROWS_CLAUSE_BASIC_EXCEPTION"/>
<Or>
<Class name="org.kohsuke.stapler.AbstractTearOff"/>
<Class name="org.kohsuke.stapler.CachingScriptLoader"/>
<Class name="org.kohsuke.stapler.framework.AbstractWebAppMain"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyClassTearOff"/>
<Class name="org.kohsuke.stapler.jelly.groovy.GroovyServerPageTearOff"/>
<Class name="org.kohsuke.stapler.jelly.JellyClassTearOff"/>
<Class name="org.kohsuke.stapler.jelly.ScriptInvoker"/>
<Class name="org.kohsuke.stapler.ScriptExecutor"/>
</Or>
</And>
<And>
<Bug pattern="THROWS_METHOD_THROWS_CLAUSE_THROWABLE"/>
<Or>
<Class name="org.kohsuke.stapler.config.ConfigurationLoader$1"/>
<Class name="org.kohsuke.stapler.jelly.groovy.Namespace$ProxyImpl"/>
</Or>
</And>
<And>
<Bug pattern="THROWS_METHOD_THROWS_RUNTIMEEXCEPTION"/>
<Or>
<Class name="org.kohsuke.stapler.export.Model"/>
<Class name="org.kohsuke.stapler.jelly.groovy.JellyBuilder"/>
<Class name="org.kohsuke.stapler.jelly.IncludeTag"/>
<Class name="org.kohsuke.stapler.RequestImpl"/>
<Class name="org.kohsuke.stapler.Stapler"/>
<Class name="org.kohsuke.stapler.TearOffSupport"/>
</Or>
</And>
</Or>
</Match>
</FindBugsFilter>