[UI] highlight CVEs and link them #10977

Open
opened 2025-11-02 09:23:48 -06:00 by GiteaMirror · 2 comments
Owner

Originally created by @6543 on GitHub (Jun 6, 2023).

the CVE-2023-32682 should look like "CVE-2023-32682" and link to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32682 ... similar to what we do with issue-indexes

-> we should have to add it to the markdown renderer

Originally created by @6543 on GitHub (Jun 6, 2023). the `CVE-2023-32682` should look like "[CVE-2023-32682](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32682)" and link to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32682 ... similar to what we do with issue-indexes -> we should have to add it to the markdown renderer
GiteaMirror added the type/featuretopic/ui labels 2025-11-02 09:23:48 -06:00
Author
Owner

@techknowlogick commented on GitHub (Jun 6, 2023):

We should be linking to CVE.org instead of CVE.mitre.org

@techknowlogick commented on GitHub (Jun 6, 2023): We should be linking to CVE.org instead of CVE.mitre.org
Author
Owner

@silverwind commented on GitHub (Jun 6, 2023):

I guess this could be done as config and be general useful. Assuming ini can do this:

[markup.linkify]
CVE-[0-9-]+: https://www.cve.org/CVERecord?id=$1
JIRA-[0-9]+: https://jira.company.com/$1

Actual regex should include \b before and after to reduce false positives. It should also not replace inside code blocks.

@silverwind commented on GitHub (Jun 6, 2023): I guess this could be done as config and be general useful. Assuming ini can do this: ```ini [markup.linkify] CVE-[0-9-]+: https://www.cve.org/CVERecord?id=$1 JIRA-[0-9]+: https://jira.company.com/$1 ``` Actual regex should include `\b` before and after to reduce false positives. It should also not replace inside code blocks.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#10977