dojo/validators.py - master - Art86/DefectDojo-DevSecOps

dojo/validators.py
110 строк4 KB
manuelsommer
Ruff: Preparation for G004 (#13076)
02 сен 2025, 19:43
02 сен 2025, 19:43e91494b
import logging
import re
from collections.abc import Callable

import cvss
from cvss import CVSS2, CVSS3, CVSS4
from django.conf import settings
from django.core.exceptions import ValidationError
from django.core.validators import FileExtensionValidator

logger = logging.getLogger(__name__)

TAG_PATTERN = re.compile(r'[ ,\'"]')  # Matches spaces, commas, single quotes, double quotes


def tag_validator(value: str | list[str], exception_class: Callable = ValidationError) -> None:
    error_messages = []

    if not value:
        return

    if isinstance(value, list):
        error_messages.extend(f"Invalid tag: '{tag}'. Tags should not contain spaces, commas, or quotes." for tag in value if TAG_PATTERN.search(tag))
    elif isinstance(value, str):
        if TAG_PATTERN.search(value):
            error_messages.append(f"Invalid tag: '{value}'. Tags should not contain spaces, commas, or quotes.")
    else:
        error_messages.append(f"Value must be a string or list of strings: {value} - {type(value)}.")

    if error_messages:
        logger.debug("Tag validation failed: %s", error_messages)
        raise exception_class(error_messages)


def clean_tags(value: str | list[str], exception_class: Callable = ValidationError) -> str | list[str]:

    if not value:
        return value

    if isinstance(value, list):
        # Replace ALL occurrences of problematic characters in each tag
        return [TAG_PATTERN.sub("_", tag) for tag in value]

    if isinstance(value, str):
        # Replace ALL occurrences of problematic characters in the tag
        return TAG_PATTERN.sub("_", value)

    msg = f"Value must be a string or list of strings: {value} - {type(value)}."
    raise exception_class(msg)


def cvss3_validator(value: str | list[str], exception_class: Callable = ValidationError) -> None:
    logger.debug("cvss3_validator called with value: %s", value)
    cvss_vectors = cvss.parser.parse_cvss_from_text(value)
    if len(cvss_vectors) > 0:
        vector_obj = cvss_vectors[0]

        if isinstance(vector_obj, CVSS3):
            # all is good
            return

        if isinstance(vector_obj, CVSS4):
            msg = "CVSS4 vector cannot be stored in the cvssv3 field. Use the cvssv4 field."
            raise exception_class(msg)
        if isinstance(vector_obj, CVSS2):
            msg = "Unsupported CVSS2 version detected."
            raise exception_class(msg)

        msg = "Unsupported CVSS version detected."
        raise exception_class(msg)

    # Explicitly raise an error if no CVSS vectors are found,
    # to avoid 'NoneType' errors during severity processing later.
    msg = "No valid CVSS3 vectors found by cvss.parse_cvss_from_text()"
    raise exception_class(msg)


def cvss4_validator(value: str | list[str], exception_class: Callable = ValidationError) -> None:
    logger.debug("cvss4_validator called with value: %s", value)
    cvss_vectors = cvss.parser.parse_cvss_from_text(value)
    if len(cvss_vectors) > 0:
        vector_obj = cvss_vectors[0]

        if isinstance(vector_obj, CVSS4):
            # all is good
            return

        if isinstance(vector_obj, CVSS3):
            msg = "CVSS3 vector cannot be stored in the cvssv4 field. Use the cvssv3 field."
            raise exception_class(msg)
        if isinstance(vector_obj, CVSS2):
            msg = "Unsupported CVSS2 version detected."
            raise exception_class(msg)

        msg = "Unsupported CVSS version detected."
        raise exception_class(msg)

    # Explicitly raise an error if no CVSS vectors are found,
    # to avoid 'NoneType' errors during severity processing later.
    msg = "No valid CVSS4 vectors found by cvss.parse_cvss_from_text()"
    raise exception_class(msg)


class ImporterFileExtensionValidator(FileExtensionValidator):
    default_allowed_extensions = [ext[1:] for ext in settings.FILE_IMPORT_TYPES]

    def __init__(self, *args: list, **kwargs: dict):
        if "allowed_extensions" not in kwargs:
            kwargs["allowed_extensions"] = self.default_allowed_extensions
        super().__init__(*args, **kwargs)