Commit 2990435f authored by Jonathan Schafer's avatar Jonathan Schafer

Code cleanup from review

Includes spacing fix in description generation
parent cad12337
...@@ -5,11 +5,11 @@ module Issues ...@@ -5,11 +5,11 @@ module Issues
def execute def execute
vulnerability = params[:vulnerability] vulnerability = params[:vulnerability]
params.merge!({ params.merge!(
title: "Investigate vulnerability: #{vulnerability.title}", title: _("Investigate vulnerability: %{title}") % { title: vulnerability.title },
description: render_description(vulnerability), description: render_description(vulnerability),
confidential: true confidential: true
}) )
super super
end end
......
...@@ -15,14 +15,14 @@ ...@@ -15,14 +15,14 @@
<% if vulnerability.try(:file) %> <% if vulnerability.try(:file) %>
* <%= _("Location") %>: [<%= vulnerability.location_text %>](<%= vulnerability.location_link %>) * <%= _("Location") %>: [<%= vulnerability.location_text %>](<%= vulnerability.location_link %>)
<% end %> <% end %>
<% if vulnerability.solution.present? %> <% if vulnerability.solution.present? %>
### <%= _("Solution") %>: ### <%= _("Solution") %>:
<%= vulnerability.solution %> <%= vulnerability.solution %>
<% end %> <% end %>
<% if vulnerability.identifiers.present? %> <% if vulnerability.identifiers.present? %>
### <%= _("Identifiers") %>: ### <%= _("Identifiers") %>:
<% vulnerability.identifiers.each do |identifier| %> <% vulnerability.identifiers.each do |identifier| %>
...@@ -33,8 +33,8 @@ ...@@ -33,8 +33,8 @@
<% end %> <% end %>
<% end %> <% end %>
<% end %> <% end %>
<% if vulnerability.links.present? %> <% if vulnerability.links.present? %>
### <%= _("Links") %>: ### <%= _("Links") %>:
<% vulnerability.links.each do |link| %> <% vulnerability.links.each do |link| %>
...@@ -45,8 +45,8 @@ ...@@ -45,8 +45,8 @@
<% end %> <% end %>
<% end %> <% end %>
<% end %> <% end %>
<% if vulnerability.remediations.present? && vulnerability.remediations.any? %> <% if vulnerability.remediations.present? && vulnerability.remediations.any? %>
### <%= _("Remediations") %>: ### <%= _("Remediations") %>:
<% vulnerability.remediations.each do |remediation| %> <% vulnerability.remediations.each do |remediation| %>
...@@ -60,8 +60,8 @@ ...@@ -60,8 +60,8 @@
</details> </details>
<% end %> <% end %>
<% end %> <% end %>
<% if vulnerability.scanner.present? || vulnerability.scan.present? %> <% if vulnerability.scanner.present? || vulnerability.scan.present? %>
### <%= _("Scanner") %>: ### <%= _("Scanner") %>:
<% if vulnerability.scanner.present? %> <% if vulnerability.scanner.present? %>
......
...@@ -2,17 +2,21 @@ ...@@ -2,17 +2,21 @@
require 'spec_helper' require 'spec_helper'
RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do RSpec.describe Issues::BuildFromVulnerabilityService do
let_it_be(:group) { create(:group) } let_it_be(:group) { create(:group) }
let_it_be(:project) { create(:project, :public, :repository, namespace: group) } let_it_be(:project) { create(:project, :public, :repository, namespace: group) }
let_it_be(:user) { create(:user) } let_it_be(:user) { create(:user) }
let(:vulnerability) { create(:vulnerability, :with_finding, project: project) } let(:vulnerability) { create(:vulnerability, :with_finding, project: project) }
let(:params) { { vulnerability: vulnerability } } let(:params) { { vulnerability: vulnerability } }
let(:result) { described_class.new(project, user, params).execute } let(:issue) { described_class.new(project, user, params).execute }
describe '#execute' do
before_all do
group.add_developer(user)
end
before do before do
stub_licensed_features(security_dashboard: true) stub_licensed_features(security_dashboard: true)
group.add_developer(user)
end end
context 'when a vulnerability has remediations' do context 'when a vulnerability has remediations' do
...@@ -23,7 +27,7 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do ...@@ -23,7 +27,7 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do
it 'does not display Remediations section' do it 'does not display Remediations section' do
expect(vulnerability.remediations).to eq(nil) expect(vulnerability.remediations).to eq(nil)
expect(result.description).not_to match(/Remediations/) expect(issue.description).not_to match(/Remediations/)
end end
end end
...@@ -38,18 +42,18 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do ...@@ -38,18 +42,18 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do
it 'does not display Remediations section' do it 'does not display Remediations section' do
expect(vulnerability.remediations).to eq([nil]) expect(vulnerability.remediations).to eq([nil])
expect(result.description).not_to match(/Remediations/) expect(issue.description).not_to match(/Remediations/)
end end
end end
context 'when raw_metadata has a remediation' do context 'when raw_metadata has a remediation' do
it 'displays Remediations section' do it 'displays Remediations section' do
expect(vulnerability.remediations.length).to eq(1) expect(vulnerability.remediations.length).to eq(1)
expect(result.description).to match(/Remediations/) expect(issue.description).to match(/Remediations/)
end end
it 'attaches the diff' do it 'attaches the diff' do
expect(result.description).to match(/This is a diff/) expect(issue.description).to match(/This is a diff/)
end end
end end
end end
...@@ -57,7 +61,7 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do ...@@ -57,7 +61,7 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do
context 'when an issue is built' do context 'when an issue is built' do
let(:expected_title) { "Investigate vulnerability: #{vulnerability.title}" } let(:expected_title) { "Investigate vulnerability: #{vulnerability.title}" }
let(:expected_description) do let(:expected_description) do
<<~DESC.chomp <<~DESC
Issue created from vulnerability <a href="http://localhost/#{group.name}/#{project.name}/-/security/vulnerabilities/#{vulnerability.id}">#{vulnerability.id}</a> Issue created from vulnerability <a href="http://localhost/#{group.name}/#{project.name}/-/security/vulnerabilities/#{vulnerability.id}">#{vulnerability.id}</a>
### Description: ### Description:
...@@ -79,17 +83,29 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do ...@@ -79,17 +83,29 @@ RSpec.describe Issues::BuildFromVulnerabilityService, '#execute' do
### Links: ### Links:
* [Cipher does not check for integrity first?](https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first) * [Cipher does not check for integrity first?](https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first)
### Scanner:
* Name: Find Security Bugs
DESC DESC
end end
it 'builds the issue with the given params' do it 'builds the issue with the given params' do
issue = result expected_attributes = {
project: project,
author: user,
title: expected_title,
description: expected_description
}
expect(issue).not_to be_persisted expect(issue).not_to be_persisted
expect(issue.project).to eq(project) expect(issue).to have_attributes(expected_attributes)
expect(issue.author).to eq(user) # expect(issue.project).to eq(project)
expect(issue.title).to eq(expected_title) # expect(issue.author).to eq(user)
expect(issue.description.strip).to eq(expected_description) # expect(issue.title).to eq(expected_title)
expect(issue).to be_confidential # expect(issue.description.strip).to eq(expected_description)
# expect(issue).to be_confidential
end
end end
end end
end end
...@@ -118,7 +118,6 @@ RSpec.describe Issues::CreateFromVulnerabilityDataService, '#execute' do ...@@ -118,7 +118,6 @@ RSpec.describe Issues::CreateFromVulnerabilityDataService, '#execute' do
* [Awesome-security blog post](https;//example.com/blog-post) * [Awesome-security blog post](https;//example.com/blog-post)
* https://example.com/another-link * https://example.com/another-link
### Scanner: ### Scanner:
* Name: Gemnasium * Name: Gemnasium
...@@ -164,9 +163,6 @@ RSpec.describe Issues::CreateFromVulnerabilityDataService, '#execute' do ...@@ -164,9 +163,6 @@ RSpec.describe Issues::CreateFromVulnerabilityDataService, '#execute' do
Please do something! Please do something!
### Scanner: ### Scanner:
* Name: Gemnasium * Name: Gemnasium
......
...@@ -119,7 +119,6 @@ RSpec.describe Issues::CreateFromVulnerabilityService, '#execute' do ...@@ -119,7 +119,6 @@ RSpec.describe Issues::CreateFromVulnerabilityService, '#execute' do
* [Cipher does not check for integrity first?](https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first) * [Cipher does not check for integrity first?](https://crypto.stackexchange.com/questions/31428/pbewithmd5anddes-cipher-does-not-check-for-integrity-first)
### Scanner: ### Scanner:
* Name: Find Security Bugs * Name: Find Security Bugs
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment