Re: [IO] Query on Veracode issue

2016-02-10 Thread Gary Gregory
On Wed, Feb 10, 2016 at 5:14 AM, Edson Richter wrote: > > > Mark Thomas escreveu > > > On 10/02/2016 12:00, Parag Joshi wrote: > > > Hi, > > > > > > > > > > > > I am using Apache Commons IO v2.4 (commons-io-2.4.jar) in one of my > > > projects. My organization

Re: [IO] Query on Veracode issue

2016-02-10 Thread Bernd Eckenfels
We discused the same (for an older Version) here: https://issues.apache.org/jira/browse/IO-461?jql=text%20~%20%22veracode%22 Basically this is wrapper around a dangerous API, you might not use it in your code. If you do, you need to review your code. Note that the topic was quite popular with

[IO] Query on Veracode issue

2016-02-10 Thread Parag Joshi
Hi, I am using Apache Commons IO v2.4 (commons-io-2.4.jar) in one of my projects. My organization uses Veracode to scan the deliveries of my project. Veracode scans the projects for vulnerability issues and flags the flaws if the code and/or third-party libraries used in the project are

Re: [IO] Query on Veracode issue

2016-02-10 Thread Mark Thomas
On 10/02/2016 12:00, Parag Joshi wrote: > Hi, > > > > I am using Apache Commons IO v2.4 (commons-io-2.4.jar) in one of my > projects. My organization uses Veracode to scan the deliveries of my > project. Veracode scans the projects for vulnerability issues and flags the > flaws if the code

Re: [IO] Query on Veracode issue

2016-02-10 Thread Edson Richter
Mark Thomas escreveu > On 10/02/2016 12:00, Parag Joshi wrote: > > Hi, > > > > > > > > I am using Apache Commons IO v2.4 (commons-io-2.4.jar) in one of my > > projects. My organization uses Veracode to scan the deliveries of my > > project. Veracode scans the projects for