lib/dradis/plugins/openvas/importer.rb in dradis-openvas-3.6.0 vs lib/dradis/plugins/openvas/importer.rb in dradis-openvas-3.7.0
- old
+ new
@@ -49,13 +49,10 @@
# Add evidence. It doesn't look like OpenVAS provides much in terms of
# instance-specific evidence though.
logger.info{ "\t\t => Adding reference to this host" }
- port_info = xml_result.at_xpath('./port').text
- evidence_content = "\n#[Port]#\n#{port_info}\n\n"
-
# There is no way of knowing where OpenVAS is going to place the evidence
# for each issue. For example:
#
# A) 1.3.6.1.4.1.25623.1.0.900498 - 'Apache Web ServerVersion Detection'
# uses the full <description> field:
@@ -89,12 +86,11 @@
#
# C) 1.3.6.1.4.1.25623.1.0.10766 - 'Apache UserDir Sensitive Information Disclosure'
# doesn't provide any per-instance information.
#
# Best thing to do is to include the full <description> field and let the user deal with it.
- description = xml_result.at_xpath('./description').text()
- evidence_content << "\n#[Description]#\n#{description}\n\n"
-
+
+ evidence_content = template_service.process_template(template: 'evidence', data: xml_result)
content_service.create_evidence(issue: issue, node: host_node, content: evidence_content)
end
end
end