Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to specify appscan-config.xml to exclude libraries from scan #40

Open
StefanLechnerDSW opened this issue Sep 26, 2023 · 1 comment

Comments

@StefanLechnerDSW
Copy link

Prerequisites

Assuming to have a project that relies on a customer delivered api.
The libraries has issues, but we are not in charge to change no we can do it.

Possible solution

use a appscan-config xml and add an exclusion to the target.

Problem

Each time I run the plugin the appscan-config.xml is rewritten, therefore the manual changes are lost.

Question

May I specify a precreated appscan-config an if yes how to do so.
My researches in the soruce code didnt find any entry how to do.

@mattmurp
Copy link
Contributor

Hi, the plugin doesn't support using a custom appscan-config.xml. If the classes within the target you want to exclude are under a different namespace than those that you want to scan, you can use the "namespaces" option to whitelist the scan to just the namespaces that you're interested in scanning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants