v1.0.5
This new version includes the following fixes and improvements:
- Metrics view fixes, capturing correct product type from GET and modified the top ten query.
- Updated bower components as well as some python dependencies. Updated some templates to reflect new bower components.
- Added vobject for new iCalendar features in tests and engagements.
- Fixes #45 - Endpoints are missing on findings when form fails to validate
- Changed they way you add/remove endpoints from findings to address #46
- Fixes #49 - django-audit log 0.3.2 breaks install
- Fixes #46 - Can't Remove Endpoints
- Address enhancement #50: Added ability to sort listing tables by clicking on TH. Added page size pull down to pagination widget.
- Adds ability to "touch" Findings to clear alerts.
- Added new upload/import of Nexpose XML 2.0 report. Refactored Burp upload.
- Addresses #47 - Capture user who closes findings
- Addresses #50 - Improving Sort for all table listing.
- Added fundtionality to upload and re-upload Burp XML, Nessus (CSV, XML), Nexpose XML 2.0, Veracode XML, and ZAP XML scan results.
- New documentation now at http://defectdojo.readthedocs.org
- Added initial fixtures for Test_Type, Development_Evironment and Product_Type. New DefectDojo installs will have initial stub data.
- Side menu, List filtering, and menu enhancements.
- Finding, Product, and Test information is better displayed.
- Alert item now has a count badge letting you know how many alerts you have pending. It will also disappear when all alerts have been cleared.
- Breadcrumbs are more intuitive and offer better historical navigation.
- Easier way to reopen closed findings - no need to fully Edit finding any more.
- Finding quick add, all that is needed is a title. This will trigger a new alert to remind you to complete the findings details.
- Endpoints are no longer required to add a finding since not all defects are endpoint related.
- Finding field Endpoint has been DEPRECATED - makemigrations is needed.
- Moved all views and urls into corresponding modules: development_environment, endpoint, engagement, finding, home, metrics, product, product_type, reports, scan, search, test, test_type, and user. urls.py now imports from each module to get urls and views defined.
- Endpoints are now listed by main host only, port, path and other information is now collapsed under the main host.
- Simple search now using django-watson see: https://github.com/etianen/django-watson/wiki for documenations. Must add
watson
to yourINSTALLED_APPS
setting and run./manage.py migrate
,./manage.py installwatson
and./manage.py buildwatson
. - Changed term highlighter to jquery-highlight (https://github.com/knownasilya/jquery-highlight) - simple and lightweight. Other js library introduced bug where text could not be selected for copy and paste.
- Brand new Finding Template CRUD functionality. Listing, Add, Edit, Delete in order to make Finding Templates more effective/efficient.
- Major Report functionality overhaul. Celery and wkhtmltopdf are now needed to generate PDF reports. See documentation at http://defectdojo.readthedocs.org/en/latest/features.html#reports
- Other minor fixes and tweaks.
This version requires the following manage.py command to be executed:
./manage.py makemigrations
./manage.py migrate
./manage.py migrate_finding_templates
./manage.py stamp_finding_last_reviewed