Import/Reimport Stats: Change name of left untouched

[Maffooch]

Following a successful import or reimport, a JSON blob for statistics is generated to provide the differential of finding activity. There was a section in the delta JSON blob that referred to a key labeled left untouched. This value does not comply with REST norms, and has been renamed to left_untouched.

[sc-6122]

[dryrunsecurity]

DryRun Security Summary

DefectDojo Version 2.46.x documentation and code updates involve renaming the 'left untouched' key to 'left_untouched' and identifying a potential input validation vulnerability in the display_tags.py template tag function.

Expand for full summary

Summary: DefectDojo Version 2.46.x documentation and code updates focus on renaming the "left untouched" key to "left_untouched" across multiple files, improving naming consistency.

Security Findings:

1. Potential Input Validation Vulnerability in display_tags.py
   • Location: dojo/templatetags/display_tags.py
   • Risk: Lack of input validation in replace_underscore_with_space function
   • Explanation: Function does not check input type, which could potentially cause TypeError if non-string input is provided

No other direct security vulnerabilities were identified in the provided summaries.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[valentijnscholten]

I'm late to the party @Maffooch, but I think we should go with just "untouched" to avoid dealing with spaces/underscores etc.

[Maffooch]

@mtesauro what are your thoughts on Val's comment? I am not opposed to going with just untouched - it would actually simplify this PR a bit to do so

[mtesauro]

I am good with just "untouched"

[Maffooch]

@valentijnscholten thanks for raising that! We will go with untouched

[dryrunsecurity]

This pull request contains a documentation and code patch for DefectDojo version 2.46.x with terminology updates and no identified security vulnerabilities.

All finding details can be found in the DryRun Security Dashboard.

[mtesauro]

Approved