From 6b99d688181fc5e8f54225e7667e5d9df0266b8f Mon Sep 17 00:00:00 2001
From: Juho Nurminen <juho.nurminen@mattermost.com>
Date: Wed, 29 Apr 2020 10:38:19 +0300
Subject: [PATCH] Suppress jQuery issue in Dependency-Check (#14396)

---
 dependency-suppression.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/dependency-suppression.xml b/dependency-suppression.xml
index c18523db82..f909a5f077 100644
--- a/dependency-suppression.xml
+++ b/dependency-suppression.xml
@@ -70,4 +70,11 @@
     <packageUrl regex="true">^pkg:golang/golang\.org/x/tools@.*$</packageUrl>
     <cpe>cpe:/a:data_tools_project:data_tools</cpe>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+      jQuery HTML sanitization not used
+    ]]></notes>
+    <packageUrl regex="true">^pkg:javascript/jquery@.*$</packageUrl>
+    <vulnerabilityName>Regex in its jQuery.htmlPrefilter  sometimes may introduce XSS</vulnerabilityName>
+  </suppress>
 </suppressions>