dradis-netsparker 3.14.0 → 3.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 353d310c2beeb39d7d4e556b86460b6512e48bdc2bcfd3e5019aeab24e7835d8
-  data.tar.gz: 3d20d0a38d206e4d08228ab4e6b43066d6dfed1501ae04a36f559ccc794ce4e3
+  metadata.gz: e8ebe715ad95148175c506b469c631dad6681c9cf5ccb80355d591dc45fb6366
+  data.tar.gz: 84168e97191291ac0e71e45a0097f27a64063c866e6f80e538b57cb14f6a8d27
 SHA512:
-  metadata.gz: 7400e753151cc1797d6732a6ad2f402148a66e8debb464e5033878ec1b7ac1ed284a3f34aee491fdf6deeeade8bc023e2cd279dc457454d62cf58946bd8dc0ec
-  data.tar.gz: 5e6a672d83d44a5e8ce830c6457d7a87fc83de038aeb6c1531dc4e7e1d536fd79653a3c3c0acfc6e4d59c7da5913449d254ef8b7eaa136502bf13bddf8c68767
+  metadata.gz: deb698dbcfae56ec5145c6eacf42c7d8d7b8a19edfcd0b1b6cf5399b7c41ab60f7800d580c3bb4596154fbea679623da28ea2062b3c3bfd413f398954ae0a852
+  data.tar.gz: 806d888dfd42d237f94e887746fef253395935df6c231318d7edc8490120759501f5d58e78f530d6693833c84dd57393d0890cb7c1d3ac423c30ae868e389f25

data/CHANGELOG.md

@@ -1,3 +1,23 @@
+## Dradis Framework 3.19 (September, 2020) ##
+
+*   No changes.
+
+## Dradis Framework 3.18 (July, 2020) ##
+
+*   No changes.
+
+## Dradis Framework 3.17 (May, 2020) ##
+
+* Use the new <title> tag provided by Netsparker.
+
+## Dradis Framework 3.16 (February, 2020) ##
+
+*   No changes.
+
+## Dradis Framework 3.15 (November, 2019) ##
+
+*   Fix link parsing of issue.external_references
+
 ## Dradis Framework 3.14 (August, 2019) ##
 
 *   No changes.

data/dradis-netsparker.gemspec

@@ -26,9 +26,9 @@ Gem::Specification.new do |spec|
   # until we bump Dradis Pro to 4.1.
   # s.add_dependency 'rails', '~> 4.1.1'
   spec.add_dependency 'dradis-plugins', '~> 3.2'
-  spec.add_dependency 'nokogiri', '~> 1.3'
+  spec.add_dependency 'nokogiri', '~> 1.10.4'
 
-  spec.add_development_dependency 'bundler', '~> 1.6'
+  spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'rake', '~> 10.0'
   spec.add_development_dependency 'rspec-rails'
   spec.add_development_dependency 'combustion', '~> 0.5.2'

data/lib/dradis/plugins/netsparker/gem_version.rb

@@ -8,7 +8,7 @@ module Dradis
 
       module VERSION
         MAJOR = 3
-        MINOR = 14
+        MINOR = 19
         TINY = 0
         PRE = nil
 

data/lib/netsparker/vulnerability.rb

@@ -19,15 +19,12 @@ module Netsparker
     # collections.
     def supported_tags
       [
-        # made-up tags
-        :title,
-
         # simple tags
         :actions_to_take, :certainty, :description, :external_references,
-        :extrainformation, :impact, :knownvulnerabilities, 
+        :extrainformation, :impact, :knownvulnerabilities,
         :rawrequest, :rawresponse, :remedy,
         :remedy_references, :required_skills_for_exploitation, :severity,
-        :type, :url,
+        :title, :type, :url,
 
         # tags that correspond to Evidence
         :vulnerableparameter, :vulnerableparametertype, :vulnerableparametervalue,
@@ -99,10 +96,6 @@ module Netsparker
       }
       method_name = translations_table.fetch(method, method.to_s)
 
-      # We've got a virtual method :title which isn't provided by Netsparker
-      # but that most users will be expecting.
-      return type.underscore.humanize if method == :title
-
       # first we try the attributes:
       # return @xml.attributes[method_name].value if @xml.attributes.key?(method_name)
 
@@ -145,8 +138,7 @@ module Netsparker
       result.gsub!(/(<p>)|(<\/p>)/, "\n")
       result.gsub!(/\n[a-z]\. /, "\n\* ")
 
-      result.gsub!(/<a href=\"(.*?)\" (.*?)>(.*?)<\/a>/i) { "\"#{$3.strip}\":#{$1.strip}" }
-      result.gsub!(/<a href=\'(.*?)\'>(.*?)<\/a>/i) { "\"#{$2.strip}\":#{$1.strip}" }
+      result.gsub!(/<a .*?href=(?:\"|\')(.*?)(?:\"|\').*?>(?:<i.*?<\/i>)?(.*?)<\/a>/i) { "\"#{$2.strip}\":#{$1.strip}" }
 
       result.gsub!(/<code><pre.*?>(.*?)<\/pre><\/code>/m) {|m| "\n\nbc.. #{$1}\n\np.  \n" }
       result.gsub!(/<pre.*?>(.*?)<\/pre>/m) {|m| "\n\nbc.. #{$1}\n\np.  \n" }

data/spec/vulnerability_spec.rb

@@ -0,0 +1,50 @@
+require 'spec_helper'
+
+describe Netsparker::Vulnerability do
+  let(:doc) { described_class.new(nil) }
+
+  describe '#cleanup_html' do
+    it 'formats the html special characters' do
+      sample = "<doc>&quot;&amp;&lt;&gt;&#39;</doc>"
+      expected = "<doc>\"&<>\'</doc>"
+      expect(doc.send(:cleanup_html, sample)).to eq(expected)
+    end
+
+    it 'outputs the CDATA text' do
+      sample = "<doc><![CDATA[Sample Text]]></doc>"
+
+      expected = "<doc>Sample Text</doc>"
+      expect(doc.send(:cleanup_html, sample)).to eq(expected)
+    end
+
+    it 're-formats the html formatting tags to textile' do
+      sample = "<doc>"\
+        "<b>Bold</b>\n"\
+        "<i>Italic</i>\n"\
+        "<em>Emphasis</em>\n"\
+        "<h2>Header</h2>\n"\
+        "<strong>Strong</strong>\n"\
+        "</doc>"
+
+      expected = "<doc>*Bold*\n_Italic_\n*Emphasis*\n*Header*\n*Strong*\n</doc>"
+      expect(doc.send(:cleanup_html, sample)).to eq(expected)
+    end
+
+    it 're-format the html link to textile' do
+      sample = "<doc>"\
+        "<a href='https://drad.is'>DradisLink1</a>\n"\
+        "<a target='_blank' href='https://drad.is'><i class='icon-external-link'></i>DradisLink2</a>\n"\
+        "<a href=\"https://drad.is\">DradisLink3</a>\n"\
+        "<a href=\"https://drad.is\" class='rspec'>DradisLink4</a>\n"\
+        "</doc>"
+
+      expected = "<doc>"\
+                   "\"DradisLink1\":https://drad.is\n"\
+                   "\"DradisLink2\":https://drad.is\n"\
+                   "\"DradisLink3\":https://drad.is\n"\
+                   "\"DradisLink4\":https://drad.is\n"\
+                 "</doc>"
+      expect(doc.send(:cleanup_html, sample)).to eq(expected)
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dradis-netsparker
 version: !ruby/object:Gem::Version
-  version: 3.14.0
+  version: 3.19.0
 platform: ruby
 authors:
 - Daniel Martin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-13 00:00:00.000000000 Z
+date: 2020-09-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dradis-plugins
@@ -30,28 +30,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: 1.10.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: 1.10.4
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.6'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.6'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -127,6 +127,7 @@ files:
 - spec/fixtures/files/netsparker-localhost-demo.xml
 - spec/fixtures/files/testsparker.xml
 - spec/spec_helper.rb
+- spec/vulnerability_spec.rb
 - templates/evidence.fields
 - templates/evidence.sample
 - templates/evidence.template
@@ -152,7 +153,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.0.1
 signing_key: 
 specification_version: 4
 summary: Netsparker add-on for the Dradis Framework.
@@ -163,3 +164,4 @@ test_files:
 - spec/fixtures/files/netsparker-localhost-demo.xml
 - spec/fixtures/files/testsparker.xml
 - spec/spec_helper.rb
+- spec/vulnerability_spec.rb