This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

ORG (Owasp Report Generator) - Change Log

From OWASP
Jump to: navigation, search

This page contains the Change log for the ORG's version v0.85 (see ORG (Owasp Report Generator) - To Do for the current development focus)


Change Log v0.86

ID Date By Type Issue Comment
20-Nov DC Features Multiple
  • in ascxProjects.cs
    • Finished implementation of xsdVerification (now the project file is checked when it is open and the user can click on the label (with the 'xsd verification error') to see details about where the current file is breaking the schema)
  • in xml.cs
    • made some changes to make the XSD verification generic and flexible
    • added ToolTip Funcionality (for now only on the 'XSD verification label')
  • in ascxTargets.cs
    • changed the SPS from obpPaths.SpsTargetPath to obpPaths.SpsTargetTasksPath (i.e use the SPS with the Tasks details)
    • Added XSD verification funcionality
    • Added Spliter betweem Authentic and File explorer view to accommodate the targets that have tasks
  • in frmCurrentAndArchivedProjects
    • Removed the 'Target Tasks' since it was redundant
    • BUG fix: added method setEnableFlagOnAllAscxControls which is used when ORG first loads to disable all tabs (exception would occur if the user clicked on a save button when a project wasn't loaded)
  • in MDI_PenTest_Reporter.cs
    • made the plug-ins link to a main button in the top bar (before it was in the 'Beta and Experimental stuff' menu)
  • in ascxFindings.cs
    • Added XSD verification funcionality
    • Added Row and Col information (Bottom right) when in Notepad Mode
  • in ascxPlugins.cs
    • Added 'Save Plugin Data' button and 'unsaved' changed funcionality (to make it in par with all other views)
    • Added XSD verification funcionality
    • Added Notepad Edit for Plug-In data (needed when fixing XSD problems in the Template files)
    • Added Row and Col information (Bottom right) when in Notepad Mode
  • in DefaultProjects.sps removed the Report_author and Report_reviewer (so they don't show in the project's view)
19-Nov DC Features Multiple
  • Bug: Fixed Search engine for XSTL (now the search works properly and the page is automatically scrolled to the selected text)
  • Feature: XSD verification for Project Xml files.
    • Implemented new utils.xml.xsdVerification which verifies a given XML against the main project's XSD with the following added funcionlity: setLabelBasedOnResult and showMessageBoxWithVerificationResult
18-Nov DC Features Multiple
  • ascxFindings.cs :
    • Solved bug that was causing the 'Changes made, do you want to save it' not to appear (Also added this check when changing the 'Edit Template to use')
    • Regression testing for new use of GUID directories to store temp files
    • Added method loadDummyXmlFileInAuthenticControl in order to resolve a current race condition with open handles in non-visible authentic controls
    • Bug: Fixed race condition that happened if the user clicked to quickly on the listbox with findings, listbox with Targets or listbox with Projects (i.e. lbFindingsInCurrentTarget, lbTargetsInCurrentProject and lbCurrentProjects). Now these listboxes are disabled until everything is loaded
    • Bug: Rename and delete Funcionality was not working in 'Windows Explorer View'
    • BUG: Fixed error that ocurred when deleting previously opened Findings
    • BUG: Fixed errors that occured when multiple findings with the same name where created (in different findings)
    • BUG: Fixed exception that occured when the finding that was open in the finding view was modified after the Report PDF was created
    • Feature: added the "Text Editor (i.e. Notepad)" View to the Findings editor (this makes it much easier to manually edit the xml files)
    • Fixed bug of autoassign Issue-ID (fixed with the new CustomORG funcionality)
    • Regression BUG: Fixed authentic issue that was preventing the images from showing in the authentic view
  • Added special file called CustomORG.xml which will contain specfic Customization Data (for example the custom value of findingIDAttributeName (this file is expected to be on the root of the ORG_CONFIG_FILES directory))
  • in Project.cs
    • added a Setter for FindingIDAttributeName
  • in VulnReportHelpers
    • added method loadCustomORGdata() and implemented code to load CustomORG value FindingIDAttributeName (from xml file CustomORG.xml)
  • in Main.cs
    • added call to method VulnReportHelpers.loadCustomORGdata();
  • Using mdbg (MS Managed Debugger) found a NASTY bug that was Crashing Visual Studio 2005 (!!!) when I opened the frmCurrentAndArchivedProjects form. The bug was on the constructor of ascxTargetTasks() which was populating the spsTargetTasksPath variable (need to do more research in the real causes of this, and why VS 2005 was not able to recover this error).
    • in the fix of this bug, made changes to: OrgBasePaths.cs (added get for SpsTargetTasksPath) and ascxTargetTasks.cs (made this.strSpsTargetTasksPath = obpPaths.SpsTargetTasksPath;
  • in ascxSplashPage
    • Usability: Profile's Name are Sorted in Splash screen
  • in MDI_PenTest_Reporter.cs
    • Made the top buttons smaller look better
    • Feature: the 'Window' menu now shows in its items a list of the current opened windows (before this list was in the sub-menu 'lists' which was not very practical)
  • authentic.cs
    • refactured a bit the code that handles the keyboard hooks
    • level 3 now supports paste of text with newlines in it
    • Fixed a NASTY bug introduced by the use of Split Containers in the Findings view which basicaly made the Keyboard Hooks not work!. I solved this by implementing a recursive search for the selected control (note: still now working 100% since I still need to fix the schema, and it doesn't seem to work when there is nothing selected (i.e. the paste of images only work if there is something selected)
15-Nov DC Features Multiple
  • in asxPlugIns.cs:
    • added new referencePlugInAssemblies capability so that we can now indicate with the dlls to load come from (the path indicated will be expected to a virtual reference to the local plug-in directory)
  • in ascxReportPdf.cs:
    • Made some small design changed.
    • Added btCreateAndShowConsolidatedXmlFile button that calculates and shows in the XML file that is used by the xslt engine (basically a call to createReportXmlFile(); and axWebBrowser_WithXslResult.Navigate)
    • Changed the way the images and compiled in the creation of the xml file, so that duplicate images don't show as alert (before it was blocking while trying to move the folder). Note: Need to add an image checksum check to detect the very fringe of same finding with same temp image name.
  • In Findings.aspx.cs
    • changed the what temp Finding files are created. Now all temp Findings are placed inside a directory named after a GUID
06-Nov DC Features Multiple
  • authentic.cs : Commented MessageBox from catch exception since it was being thrown during normal ORG usage,
  • ascxFindings.cs: cleaned up a bit the "Add Findings using template" feature (it is now on a separate groupbox and you need to click on 'Add'). Also changed the code so that it detects duplicate entries and auto selects the newly added Finding.
  • ascxFindings.cs: lbFindingsInCurrentTarget is now sorted and updated the code of 'Add new finding' so that it finds the newly added item.
  • ascxFindings.cs: Bug fix, rename funcionality now auto select the renamed Finding
  • ascxExecutiveSummary: new feature: 'Report Contents' templates, now you can just select a template Report Finding
05-Nov DC Features Multiple
  • in ascxTargets.cs - bug fix: in lbTargetsInCurrentProject_SelectedIndexChanged detect if there is a project selected
  • in ascxTargets.cs - added some funcionionatity to the nmap imported: filter by status[@state='up'], provide default target type name, detailed reporting of what was imported, ignored or not added due to duplicated target
  • in ascxTargets.cs - added a check box (cbShowContentOfProjectFolder) controls if the axWebBrowserContentsOfProjectFolder is show and updated
  • in ascxFindings.cs - added 4 spliter between Targets and Findings (i.e. everywhere),
02-Nov DC Features Multiple
  • in scriptHost.cs: Make compilation errors show in a Messagebox instead of throwing an ApplicationException
  • in ascxFindings.cs: fix bug 'previous finding is shown when changing to a target that has no findings'
24-Nov MD Bug Fixes Multiple Altova fixes
  • When putting enter you lose focus on the altova component so you can't do double enters.
  • When pasting content with newlines in it the xml element would be shown as an escaped entity "<newline />" instead of the actual xml entity which would give the desired result of a newline.
22-Nov DC Features Multiple
  • Findings tab: lbTargetsInCurrentProject is now sorted
  • Findings tab: New feature to filter lbTargetsInCurrentProject (combo box of Available Targets)
  • Findings tab: Added new Template_Findings funcionality (requires the existence of a Template_Findings folder in the plugins area)
  • Target tab: Add new Web Browser view into the 'projects' folder
  • Target Tab: lbTargetsInCurrentProject is now sorted
  • Target Tab: Added abilty to search in target contents for DNS or IPs (good when making sure an IP is not already in the system)
19-Nov MD Update Fixed image issue Fixed the problem with the images not displaying inside of the new verion of the Altova component.
15-Nov MD Update Created Installer Created rough draft of installer using WiX
06-Nov MD Update Removed the global variable class Removed the global variable class and moved many of the paths to the OrgPath class. I did this for ease of maintenance and a little bit of code cleaniness.
04-Nov MD Update Added in the initial zips that are used for config files, etc... Had to add these because of a change made by Dinis.

Change Log v0.85

ID Date By Type Issue Comment
02-Nov DC Feature View Findings in Explorer When editing Findings there is now a new 'Viewing Modw' which gives the user a 'Window Explorer' view of the finding uncompressed files
02-Nov DC Update Changed the current version to v0.85 Since that is the version we are working on at the moment
02-Nov DC Fix Changed the layout of the Findings page In the previous layout, the 'target' window was occuping too much space
02-Nov DC Feature Left navigation on main projects window now resizes before it was hard to see the name of long projects
27-Oct MD Fix Fixed a few bugs related to getting the next id and started a project class The finding ID's functionality was not working. I am moving project specific information to its own class because it is spread over at least three different objects which is hard to maintain and keep track of (at least for my small brain).
27-Oct DC Patch Hide CVS folders changed loadDirectoriesIntoListBox loadDirectoriesIntoComboBox so that any folder named CVS will not appear in those lists (so now all files that start with an _ or are called CVS don't appear)
27-Oct DC Breaking Change UserProfiles folder Since a) the UserProfiles point to the location of the data files, b) the ORG_CONFIG_FILES might now come from multiple places, c) the UserProfiles are usually specifically to each user (namely for working offline), I moved the UserProfiles to the Application Execution folder
27-Oct DC Code Cleanup Allow ORG_CONFIG_FILES to be loaded from a specified location This is needed for the cases where the developers are using different ORG_CONFIG_FILES directories (which is my case). To make this work I removed all references to VulnReport_Files and made sure that all references to config files are made via GlobalVariables.****. I also added a quick check on load for the DevPath.org file. If it exists ORG will load it and use it as a virtual reference to the location of the config files (for example mine points to ..\..\..\..\ORG\ORG_CONFIG_FILES), if it doesn't exist, then ORG will look for those files in the current application execution directory
26-Oct MD Code Cleanup Removed a few more global variable references Removed some more global variable references, hopefully the whole global variable class will be gone soon
26-Oct DC Maintenence Removed all references to Office assemblies namely the Powerpoint assembly, since that funcionality is now in the Plugins
25-Oct MD Bug Fixed the issue related to the Altova component. My solution was to load the xml files into xml document objects and then feed them into the altova component. This got around the handle being left opened issue without any functionality changes for the rest of the code.
25-Oct DC Bug Race condition on new altova component locks the directory so that it cannot be used twice The issue seems to be related to a directory handle that exists on the ORG process (created by the Altova component) that prevents the directory from being completely deleted and means that when the same finding is opened again an error is thrown. The current solution is based on saving the temporary files in a folder named after a unique GUID. This solves the problem in the short term. but we still need to figure out how to close the handle properly (since at the moment not all directories are properly deleted)
25-Oct DC Bug When a project is loaded in the findings tab the list of available findings was not cleared this showed it self in new projects which had no targets (and if the user had the findings tab open)
22-Oct MD Upgrade New Altova Authentic component Upgrade the Alotva Authentic component
23-Sep MD Feature Nmap Import Added in the ability to import in a xml output file from nmap scanner.
13-Sep MD Feature Added in check for program pre-reqs Added in the VulnReportHelpers.confirmExistenceOfRequiredFilesAndFolders so we can make sure the running environment is stable before executing the program.
12-Sep MD Refactoring New user profile class Worked on the UserProfile class. Reason for creating a seperate class was for code cleanliness and everything was getting confusing for loading, projects, etc.. from the yucky global variables.
09-Sep MD Bug Access Violation when doing alt + f4 on splash screen This was caused by the program not checking to see if the user wanted to continue or exit the program.
07-Sep MD Upgrade Update to .Net 2.0 Upgraded to .NET 2.0 and got all of the compiler errors and most of the warnings cleared out.

back to ORG (Owasp Report Generator)