Skip to content

Commit ce5cb64

Browse files
committed
chore: remove unnecessary false positive suppression from rails actiontext
1 parent 248ba31 commit ce5cb64

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

build-platform/dependency-check-suppress.xml

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -246,17 +246,6 @@
246246
<vulnerabilityName>XSS in $sanitize in Safari/Firefox</vulnerabilityName>
247247
</suppress>
248248

249-
<suppress>
250-
<notes><![CDATA[
251-
Suppress false positive for DOMPurify within trix.js which is brought in by Rails actiontext. GoCD doesn't use actiontext, despite
252-
the mandatory dependency.
253-
]]></notes>
254-
<packageUrl regex="true">^pkg:javascript/DOMPurify@.*$</packageUrl>
255-
<cve>CVE-2025-15599</cve>
256-
<cve>CVE-2025-26791</cve>
257-
<cve>CVE-2026-0540</cve>
258-
</suppress>
259-
260249
<suppress>
261250
<notes><![CDATA[
262251
Suppress false positive from bad OSSIndex data on foundation-sites issue which only affects <= 6.3.3 according to https://nvd.nist.gov/vuln/detail/CVE-2020-26304

0 commit comments

Comments
 (0)