diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 5f684c91f..275c0b804 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -2,6 +2,16 @@ Release notes ============= +Version v33.6.3 +---------------- + +- We updated RTD build configuration. +- We added importer for OSS-Fuzz. +- We removed vulnerabilities with empty aliases. +- We fixed search encoding issue https://github.com/nexB/vulnerablecode/issues/1336. +- We added middleware to ban "bytedance" user-agent. + + Version v33.6.2 ---------------- diff --git a/setup.cfg b/setup.cfg index abea64a2f..f1019f1dc 100644 --- a/setup.cfg +++ b/setup.cfg @@ -1,6 +1,6 @@ [metadata] name = vulnerablecode -version = 33.6.2 +version = 33.6.3 license = Apache-2.0 AND CC-BY-SA-4.0 # description must be on ONE line https://github.com/pypa/setuptools/issues/1390 diff --git a/vulnerabilities/improvers/__init__.py b/vulnerabilities/improvers/__init__.py index 9880bf9ee..35aef82b4 100644 --- a/vulnerabilities/improvers/__init__.py +++ b/vulnerabilities/improvers/__init__.py @@ -8,7 +8,8 @@ # from vulnerabilities.improvers import valid_versions -from vulnerabilities.improvers import vulnerability_status + +# from vulnerabilities.improvers import vulnerability_status IMPROVERS_REGISTRY = [ valid_versions.GitHubBasicImprover, @@ -24,7 +25,7 @@ valid_versions.DebianOvalImprover, valid_versions.UbuntuOvalImprover, valid_versions.OSSFuzzImprover, - vulnerability_status.VulnerabilityStatusImprover, + # vulnerability_status.VulnerabilityStatusImprover, ] IMPROVERS_REGISTRY = {x.qualified_name: x for x in IMPROVERS_REGISTRY} diff --git a/vulnerabilities/middleware/ban_user_agent.py b/vulnerabilities/middleware/ban_user_agent.py new file mode 100644 index 000000000..6aafc490c --- /dev/null +++ b/vulnerabilities/middleware/ban_user_agent.py @@ -0,0 +1,18 @@ +# +# Copyright (c) nexB Inc. and others. All rights reserved. +# VulnerableCode is a trademark of nexB Inc. +# SPDX-License-Identifier: Apache-2.0 +# See http://www.apache.org/licenses/LICENSE-2.0 for the license text. +# See https://github.com/nexB/vulnerablecode for support or download. +# See https://aboutcode.org for more information about nexB OSS projects. +# + +from django.http import HttpResponseNotFound +from django.utils.deprecation import MiddlewareMixin + + +class BanUserAgent(MiddlewareMixin): + def process_request(self, request): + user_agent = request.META.get("HTTP_USER_AGENT", None) + if user_agent and "bytedance" in user_agent: + return HttpResponseNotFound(404) diff --git a/vulnerabilities/templates/includes/pagination.html b/vulnerabilities/templates/includes/pagination.html index 85020e4d6..0d6dad430 100644 --- a/vulnerabilities/templates/includes/pagination.html +++ b/vulnerabilities/templates/includes/pagination.html @@ -1,12 +1,12 @@