dradis-netsparker 3.22.0 → 3.22.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +5 -0
  3. data/dradis-netsparker.gemspec +1 -1
  4. data/lib/dradis/plugins/netsparker/gem_version.rb +1 -1
  5. data/lib/netsparker/vulnerability.rb +10 -4
  6. data/templates/issue.fields +4 -0
  7. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 43cd895f57d59fe1928d2941167c2da47d27496dd38dc99286119b8f5f6b65b5
4
- data.tar.gz: 3d21675636a694453d76690ffd23654239dcc4230fa457d3444ea7854528e7fb
3
+ metadata.gz: 930ce156c1a56f460e67a8343ff39f89b7b4630137f9e6899c79a16233c7daf6
4
+ data.tar.gz: fe9077dbda0b65a7e70762da8fa8b2a627750ee749ad4135495037421de06dc6
5
5
  SHA512:
6
- metadata.gz: 9d583f8b743d429c50672084e994cb7946d935e9d0fc03e2e4b61bf6bd7ad5f898ccc8b26d115f786062ffe1ba81c20b7f9edbf7f8691761ec6d6f91b24d7919
7
- data.tar.gz: 0afc40c7a19e9e677cfb41fe335528055018f4f28662a1410db3d18e764e7c5b4b56729afabbcaa0138b9f87ca87d454a8de388d22f635f9907c60ba858a2802
6
+ metadata.gz: eaa024049867d3306cc0f008a697a81a8425a3fc620048c77e4a1990190e82f7bd7ceaa6e0b8f02106b30c867453ce625259f5392ffdca5eebadb7021514528f
7
+ data.tar.gz: 8b8272da2567065f74d8e307c8c1ca984486fb3e0ae1d1d3835ee9b0d5b8bea934a44f8819caffc0bc70138bb6ba4d6a800000ab1243a8833ae9c10d84dcf80a
data/CHANGELOG.md CHANGED
@@ -1,3 +1,8 @@
1
+ ## Dradis Framework 3.22.1 (May, 2021) ##
2
+
3
+ * Add new issue.classification_asvs40, issue.classification_nistsp80053, issue.classification_disastig, and issue.classification_iso27001 fields.
4
+ * Update nokogiri dependency.
5
+
1
6
  ## Dradis Framework 3.22 (April, 2021) ##
2
7
 
3
8
  * No changes.
data/dradis-netsparker.gemspec CHANGED
@@ -26,7 +26,7 @@ Gem::Specification.new do |spec|
26
26
  # until we bump Dradis Pro to 4.1.
27
27
  # s.add_dependency 'rails', '~> 4.1.1'
28
28
  spec.add_dependency 'dradis-plugins', '~> 3.2'
29
- spec.add_dependency 'nokogiri', '~> 1.10.4'
29
+ spec.add_dependency 'nokogiri', '~> 1.11.4'
30
30
 
31
31
  spec.add_development_dependency 'bundler'
32
32
  spec.add_development_dependency 'rake', '~> 10.0'
data/lib/dradis/plugins/netsparker/gem_version.rb CHANGED
@@ -9,7 +9,7 @@ module Dradis
9
9
  module VERSION
10
10
  MAJOR = 3
11
11
  MINOR = 22
12
- TINY = 0
12
+ TINY = 1
13
13
  PRE = nil
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
data/lib/netsparker/vulnerability.rb CHANGED
@@ -30,14 +30,15 @@ module Netsparker
30
30
  :vulnerableparameter, :vulnerableparametertype, :vulnerableparametervalue,
31
31
 
32
32
  # nested tags
33
- :classification_capec,
33
+ :classification_asvs40, :classification_capec,
34
34
 
35
35
  :classification_cvss_vector,
36
36
  :classification_cvss_base_value, :classification_cvss_base_severity,
37
37
  :classification_cvss_environmental_value, :classification_cvss_environmental_severity,
38
38
  :classification_cvss_temporal_value, :classification_cvss_temporal_severity,
39
39
 
40
- :classification_cwe, :classification_hipaa,
40
+ :classification_cwe, :classification_disastig, :classification_hipaa,
41
+ :classification_iso27001, :classification_nistsp80053,
41
42
  :classification_owasp2013, :classification_owasp2017, :classification_owasppc,
42
43
  :classification_pci31, :classification_pci32, :classification_wasc,
43
44
 
@@ -74,6 +75,7 @@ module Netsparker
74
75
  # tags.
75
76
  translations_table = {
76
77
  actions_to_take: 'actionsToTake',
78
+ classification_asvs40: 'classification/ASVS40',
77
79
  classification_capec: 'classification/CAPEC',
78
80
  classification_cwe: 'classification/CWE',
79
81
  classification_cvss_vector: 'classification/CVSS/vector',
@@ -83,7 +85,10 @@ module Netsparker
83
85
  classification_cvss_environmental_severity: "classification/CVSS/score/type[text()='Environmental']/../severity",
84
86
  classification_cvss_temporal_value: "classification/CVSS/score/type[text()='Temporal']/../value",
85
87
  classification_cvss_temporal_severity: "classification/CVSS/score/type[text()='Temporal']/../severity",
88
+ classification_disastig: 'classification/DISASTIG',
86
89
  classification_hipaa: 'classification/HIPAA',
90
+ classification_iso27001: 'classification/ISO27001',
91
+ classification_nistsp80053: 'classification/NISTSP80053',
87
92
  classification_owasp2013: 'classification/OWASP2013',
88
93
  classification_owasp2017: 'classification/OWASP2017',
89
94
  classification_owasppc: 'classification/OWASPPC',
@@ -128,13 +133,14 @@ module Netsparker
128
133
  result.gsub!(/<i>(.*?)<\/i>/) { "_#{$1}_" }
129
134
  result.gsub!(/<em>(.*?)<\/em>/) { "*#{$1}*" }
130
135
  result.gsub!(/<h2>(.*?)<\/h2>/) { "*#{$1}*" }
131
- result.gsub!(/<strong>(.*?)<\/strong>/) { "*#{$1}*" }
136
+ result.gsub!(/<strong>(.*?)<\/strong>/) { "*#{$1}* " }
132
137
 
133
- result.gsub!(/(<br>)|(<br\/>)/, "\n")
138
+ result.gsub!(/(<br>)|(<br(\s*)\/>)/, "\n")
134
139
  result.gsub!(/(<div>)|(<\/div>)/, "")
135
140
  result.gsub!(/<font.*?>(.*?)<\/font>/m, '\1')
136
141
  result.gsub!(/<p (.*?)>(.*?)<\/p>/) { "\n#{$2}\n" }
137
142
  result.gsub!(/<span(.*?)>(.*?)<\/span>/, '\2')
143
+ result.gsub!(/<span(.*?)>|<\/span>/, "")
138
144
  result.gsub!(/(<p>)|(<\/p>)/, "\n")
139
145
  result.gsub!(/\n[a-z]\. /, "\n\* ")
140
146
 
data/templates/issue.fields CHANGED
@@ -1,5 +1,6 @@
1
1
  issue.actions_to_take
2
2
  issue.certainty
3
+ issue.classification_asvs40
3
4
  issue.classification_capec
4
5
  issue.classification_cvss_vector
5
6
  issue.classification_cvss_base_value
@@ -9,7 +10,10 @@ issue.classification_cvss_environmental_severity
9
10
  issue.classification_cvss_temporal_value
10
11
  issue.classification_cvss_temporal_severity
11
12
  issue.classification_cwe
13
+ issue.classification_disastig
12
14
  issue.classification_hipaa
15
+ issue.classification_iso27001
16
+ issue.classification_nistsp80053
13
17
  issue.classification_owasp2013
14
18
  issue.classification_owasp2017
15
19
  issue.classification_owasppc
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dradis-netsparker
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.22.0
4
+ version: 3.22.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Daniel Martin
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-02 00:00:00.000000000 Z
11
+ date: 2021-05-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dradis-plugins
@@ -30,14 +30,14 @@ dependencies:
30
30
  requirements:
31
31
  - - "~>"
32
32
  - !ruby/object:Gem::Version
33
- version: 1.10.4
33
+ version: 1.11.4
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - "~>"
39
39
  - !ruby/object:Gem::Version
40
- version: 1.10.4
40
+ version: 1.11.4
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: bundler
43
43
  requirement: !ruby/object:Gem::Requirement