org.owasp.dependencycheck.analyzer

Class VersionFilterAnalyzer

java.lang.Object

org.owasp.dependencycheck.analyzer.AbstractAnalyzer

org.owasp.dependencycheck.analyzer.VersionFilterAnalyzer

All Implemented Interfaces:

Analyzer

@ThreadSafe
public class VersionFilterAnalyzer
extends AbstractAnalyzer

This analyzer attempts to filter out erroneous version numbers collected. Initially, this will focus on JAR files that contain a POM version number that matches the file name - if identified all other version information will be removed.

Author:

Jeremy Long

Constructor Summary

Constructors

Constructor and Description
VersionFilterAnalyzer()

Method Summary

Modifier and Type	Method and Description
protected void	analyzeDependency(Dependency dependency, Engine engine) The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities.
AnalysisPhase	getAnalysisPhase() Returns the phase that the analyzer is intended to run in.
protected String	getAnalyzerEnabledSettingKey() Returns the setting key to determine if the analyzer is enabled.
String	getName() Returns the name of the analyzer.

Methods inherited from class org.owasp.dependencycheck.analyzer.AbstractAnalyzer

analyze, close, closeAnalyzer, getSettings, initialize, isEnabled, prepare, prepareAnalyzer, setEnabled, supportsParallelProcessing

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

VersionFilterAnalyzer

public VersionFilterAnalyzer()

Method Detail

getName

public String getName()

Returns the name of the analyzer.

Returns:

the name of the analyzer.

getAnalysisPhase

public AnalysisPhase getAnalysisPhase()

Returns the phase that the analyzer is intended to run in.

Returns:

the phase that the analyzer is intended to run in.

getAnalyzerEnabledSettingKey

protected String getAnalyzerEnabledSettingKey()

Returns the setting key to determine if the analyzer is enabled.

Specified by:

getAnalyzerEnabledSettingKey in class AbstractAnalyzer

Returns:

the key for the analyzer's enabled property

analyzeDependency

protected void analyzeDependency(Dependency dependency,
                                 Engine engine)
                          throws AnalysisException

The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities.

Specified by:

analyzeDependency in class AbstractAnalyzer

Parameters:

dependency - The dependency being analyzed

engine - The scanning engine

Throws:

AnalysisException - is thrown if there is an exception analyzing the dependency.