dradis-acunetix 4.19.0 → 5.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6848a64f469b4fd4dfdbda618cf73292d46f6015ee69e6edcc92f462d50bd322
-  data.tar.gz: bc18893ba7151ae8b183d17a2737ee3b660c38aeb50b70337c462836b48499f7
+  metadata.gz: 7c3359b19271cb5ead1f4661414c4bbaa1f14fcf5c4938faefcf30abd19e00b0
+  data.tar.gz: f127ef6a55000150c99822eb73760cefa2f69bc388eac14ed37e7e03c29514cf
 SHA512:
-  metadata.gz: 23834ca3074c9608da844720b16b4ea3419f13c81ced9ca23ba63d218a85e4ef3142b465217d63f15dd0ece06ba67e492e5aef44c52b8a1dbcd2dc502dc64ae9
-  data.tar.gz: 949bb33188c760b7d1b1cea566b80f1296d523a8b6af3f1d97470705f623819ed89b464ae48efeeb61d46532e175940a8604bb44c777a188782b41d89a3464f9
+  metadata.gz: df76d5c3c5479dc65a3c70b79bc4e0ed3e9aceec8cbea651d40a76070d898ffd076bf54716916f174f97236db8916ebd66a5101a0052e17b2a3af59fe7a0f3b3
+  data.tar.gz: 1e4b0ac6701d36dc59036fbf6a62a9b4a7c562e118f1a32bf4f802fe732d878d64e966eb644143bfc4e71f2ecb355ab90ee9024bdb356c5b20fdad33b51bde94

data/.ruby-version

@@ -0,0 +1 @@
+3.4.6

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+v5.0.0 (March 2026)
+  - No changes
+
+v4.20.0 (XXXX 2025)
+  - Update HTML tag parsing for Acunetix 360
+
 v4.19.0 (November 2025)
   - No changes
 

data/dradis-acunetix.gemspec

@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
   # versions of Rails (a sure recipe for disaster, I'm sure), which is needed
   # until we bump Dradis Pro to 4.1.
   # s.add_dependency 'rails', '~> 4.1.1'
-  spec.add_dependency 'dradis-plugins', '~> 4.0'
+  spec.add_dependency 'dradis-plugins', '>= 4.0'
   spec.add_dependency 'nokogiri', '~> 1.3'
 
   spec.add_development_dependency 'bundler', '~> 2'

data/lib/acunetix/concerns/cleanup.rb

@@ -8,32 +8,34 @@ module Acunetix
 
       format_table(result)
 
-      result.gsub!(/"/, '"')
-      result.gsub!(/&/, '&')
-      result.gsub!(/&lt;/, '<')
-      result.gsub!(/&gt;/, '>')
-
       result.gsub!(/<h[0-9] >(.*?)<\/h[0-9]>/) { "\n\n*#{$1.strip}*\n\n" }
       result.gsub!(/<b>(.*?)<\/b>/) { "*#{$1.strip}*" }
-      result.gsub!(/<br\/>/, "\n")
+      result.gsub!(/<br ?\/>/, "\n")
       result.gsub!(/<div(.*?)>|<\/div>/, '')
+      result.gsub!(/<span.*?>(.*?)<\/span>/m){"#{$1.strip}"}
+      result.gsub!(/<span.*?>|<\/span>/, '') #repeating again to deal with nested/empty/incomplete span tags
+
+      result.gsub!(/<a(.*?)href='(.*?)'><i(.*?)><\/i>(.*?)<\/a>/m) { "\"#{$4}\":#{$2}" }
       result.gsub!(/<a.*?>(.*?)<\/a>/m, '\1')
       result.gsub!(/<font.*?>(.*?)<\/font>/m, '\1')
       result.gsub!(/<h2>(.*?)<\/h2>/) { "*#{$1.strip}*" }
       result.gsub!(/<i>(.*?)<\/i>/, '\1')
-      result.gsub!(/<p.*?>(.*?)<\/p>/) { "\np. #{$1.strip}\n" }
-      result.gsub!(/<code><pre.*?>(.*?)<\/pre><\/code>/m){|m| "\n\nbc.. #{$1.strip}\n\np.  \n" }
-      result.gsub!(/<code>(.*?)<\/code>/) { "@#{$1.strip}@" }
-      result.gsub!(/<pre.*?>(.*?)<\/pre>/m){|m| "\n\nbc.. #{$1.strip}\n\np.  \n" }
-
-      result.gsub!(/<li.*?>([\s\S]*?)<\/li>/m){"\n* #{$1.strip}"}
-      result.gsub!(/<ul>([\s\S]*?)<\/ul>/m){ "#{$1.strip}\n" }
+      result.gsub!(/<em>(.*?)<\/em>/) { "_#{$1.strip}_" }
+      result.gsub!(/<p.*?>(.*?)<\/p>/) { "p. #{$1.strip}\n\n" }
+      result.gsub!(/<code><pre.*?>(.*?)<\/pre><\/code>/m){|m| "\n\nbc.. #{$1}\n\np. \n" }
+      result.gsub!(/<code>(.*?)<\/code>/) {  "\n\nbc. #{$1}\n\n" }
+      result.gsub!(/<pre.*?>(.*?)<\/pre>/) { "\n\nbc. #{$1}\n\n" }
+      result.gsub!(/<pre.*?>(.*?)<\/pre>/m){|m| "\n\nbc.. #{$1}\n\np. \n" }
+
+      result.gsub!(/<li.*?>([\s\S]*?)<\/li>/m){"\n* #{$1}"}
+      result.gsub!(/<ul>([\s\S]*?)<\/ul>/m){ "#{$1}\n" }
       result.gsub!(/(<ul>)|(<\/ul>|(<ol>)|(<\/ol>))/, "\n")
-      result.gsub!(/<li>/, "\n* ")
-      result.gsub!(/<\/li>/, "\n")
+      result.gsub!(/<strong>(.*?)<\/strong>/m) { "*#{$1}*" }
 
-      result.gsub!(/<strong>(.*?)<\/strong>/) { "*#{$1.strip}*" }
-      result.gsub!(/<span.*?>(.*?)<\/span>/m){"#{$1.strip}\n"}
+      result.gsub!(/&quot;/, '"')
+      result.gsub!(/&amp;/, '&')
+      result.gsub!(/&lt;/, '<')
+      result.gsub!(/&gt;/, '>')
 
       result
     end
@@ -68,7 +70,7 @@ module Acunetix
 
     # Some of the values have embedded HTML conent that we need to strip
     def tags_with_html_content
-      [:details, :description, :detailed_information, :impact, :recommendation]
+      [:details, :description, :detailed_information, :impact, :recommendation, :remedial_actions, :remedial_procedure, :external_references]
     end
 
     def tags_with_commas

data/lib/dradis/plugins/acunetix/gem_version.rb

@@ -7,8 +7,8 @@ module Dradis
       end
 
       module VERSION
-        MAJOR = 4
-        MINOR = 19
+        MAJOR = 5
+        MINOR = 0
         TINY = 0
         PRE = nil
 

data/lib/dradis/plugins/acunetix/mapping.rb

@@ -60,7 +60,10 @@ module Dradis::Plugins::Acunetix
         'CVSS3Vector' => '{{ acunetix[vulnerability_360.cvss31_vector] }}',
         'CVSS3Base' => '{{ acunetix[vulnerability_360.cvss31_base] }}',
         'CVSS3Temporal' => '{{ acunetix[vulnerability_360.cvss31_temporal] }}',
-        'CVSS3Environmental' => '{{ acunetix[vulnerability_360.cvss31_environmental] }}'
+        'CVSS3Environmental' => '{{ acunetix[vulnerability_360.cvss31_environmental] }}',
+        'Remedial Actions' => '{{ acunetix[vulnerability_360.remedial_actions] }}',
+        'Remedial Procedure' => '{{ acunetix[vulnerability_360.remedial_procedure] }}',
+        'References' => '{{ acunetix[vulnerability_360.external_references] }}',
       }
     }.freeze
 

data/spec/acunetix/acunetix360/importer_spec.rb

@@ -57,5 +57,15 @@ module Dradis::Plugins
 
       run_import!
     end
+
+    it 'parses links in <external-references> tag' do
+      expect(@content_service).to receive(:create_issue) do |args|
+        expect(args[:text]).to include('"Blind SQL Injection":https://www.owasp.org/index.php/Blind_SQL_Injection')
+        expect(args[:text]).to include('"SQL Injection Cheat Sheet[#Blind]":https://www.acunetix.com/blog/web-security/sql-injection-cheat-sheet/#BlindSQLInjections')
+        OpenStruct.new(args)
+      end
+
+      run_import!
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dradis-acunetix
 version: !ruby/object:Gem::Version
-  version: 4.19.0
+  version: 5.0.0
 platform: ruby
 authors:
 - Daniel Martin
@@ -13,14 +13,14 @@ dependencies:
   name: dradis-plugins
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '4.0'
 - !ruby/object:Gem::Dependency
@@ -103,6 +103,7 @@ files:
 - ".github/pull_request_template.md"
 - ".gitignore"
 - ".rspec"
+- ".ruby-version"
 - CHANGELOG.md
 - CHANGELOG.template
 - CONTRIBUTING.md