-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy pathspotbugs-exclude.xml
52 lines (52 loc) · 1.98 KB
/
spotbugs-exclude.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
<?xml version="1.0"?>
<FindBugsFilter>
<Match>
<Or>
<!-- Proper handling of CRLF needs to be insured through Logback config. -->
<Bug pattern="CRLF_INJECTION_LOGS" />
<!-- Finalizer attacks are not relevant because we only run trusted code
on the same JVM. -->
<Bug pattern="CT_CONSTRUCTOR_THROW" />
<!-- While correct, the high number of matches overshadows other, more
important issues. -->
<Bug pattern="EI_EXPOSE_REP" />
<Bug pattern="EI_EXPOSE_REP2" />
<!-- Synchronization-related issues are ignored for now but should be
handled in the future. -->
<Bug pattern="JLM_JSR166_UTILCONCURRENT_MONITORENTER" />
<!-- Produces false positives because it does not support
Objects.requireNonNull.
See: https://github.com/spotbugs/spotbugs/issues/456 -->
<Bug pattern="NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE" />
<And>
<!-- Generated class files for aspects contain this null check. -->
<Or>
<Bug pattern="PA_PUBLIC_PRIMITIVE_ATTRIBUTE" />
<Bug pattern="RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE" />
</Or>
<Class name="~.*Aspect" />
</And>
</Or>
</Match>
<Match>
<Source name="~.*\.kt" />
<Or>
<!-- Class files generated by the Kotlin compiler generate false positives
for the following bugs. -->
<Bug pattern="BC_BAD_CAST_TO_ABSTRACT_COLLECTION" />
<Bug pattern="NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE" />
<Bug pattern="NP_PARAMETER_MUST_BE_NONNULL_BUT_MARKED_AS_NULLABLE" />
<And>
<!-- Ignore generated constructor for JPA entity classes. -->
<Bug pattern="NP_NONNULL_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR" />
<Class name="~.*\.model\..*" />
</And>
<And>
<!-- Ignore generated fields. -->
<Bug pattern="SE_BAD_FIELD" />
<Class name="~.*\$[0-9]+" />
<Field name="~\$.*" />
</And>
</Or>
</Match>
</FindBugsFilter>