+
${escapeHtml(p.name || '未命名')}
+
${escapeHtml(desc)}
+
${vulnDetailField(vulnT('vulnerabilityPage.detailVulnId'), vuln.id, true)}
+ ${vulnDetailProjectField(vuln)}
${vuln.type ? vulnDetailField(vulnT('vulnerabilityPage.detailType'), vuln.type, false) : ''}
${vuln.target ? vulnDetailField(vulnT('vulnerabilityPage.detailTarget'), vuln.target, false) : ''}
${vulnDetailField(vulnT('vulnerabilityPage.detailConversationId'), vuln.conversation_id, true)}
@@ -1005,11 +1031,50 @@ async function changeVulnerabilityPageSize() {
await loadVulnerabilities();
}
+function buildVulnerabilityProjectOptionsHtml(selectedId) {
+ const sel = (selectedId || '').trim();
+ let html = `
`;
+ const entries = typeof projectNameById !== 'undefined' ? Object.entries(projectNameById) : [];
+ entries.sort((a, b) => (a[1] || '').localeCompare(b[1] || '', undefined, { sensitivity: 'base' }));
+ entries.forEach(([id, name]) => {
+ if (!id) return;
+ const selected = id === sel ? ' selected' : '';
+ html += `
`;
+ });
+ if (sel && !entries.some(([id]) => id === sel)) {
+ html += `
`;
+ }
+ return html;
+}
+
+async function populateVulnerabilityModalProjectSelect(selectedId) {
+ const sel = document.getElementById('vulnerability-project-id');
+ if (!sel) return;
+ try {
+ const res = await apiFetch('/api/projects?limit=200');
+ if (res.ok) {
+ const list = await res.json();
+ if (typeof rebuildProjectNameMap === 'function') {
+ rebuildProjectNameMap(list);
+ } else if (typeof projectNameById !== 'undefined') {
+ (list || []).forEach((p) => { if (p.id) projectNameById[p.id] = p.name || p.id; });
+ }
+ }
+ } catch (e) {
+ console.warn('加载项目列表失败', e);
+ }
+ sel.innerHTML = buildVulnerabilityProjectOptionsHtml(selectedId || '');
+ sel.value = selectedId || '';
+}
+
// 显示添加漏洞模态框
-function showAddVulnerabilityModal() {
+async function showAddVulnerabilityModal() {
currentVulnerabilityId = null;
document.getElementById('vulnerability-modal-title').textContent = vulnT('vulnerability.addVuln');
+ const defaultProject = vulnerabilityFilters.project_id || '';
+ await populateVulnerabilityModalProjectSelect(defaultProject);
+
// 清空表单
document.getElementById('vulnerability-conversation-id').value = '';
document.getElementById('vulnerability-conversation-tag').value = '';
@@ -1051,6 +1116,8 @@ async function editVulnerability(id) {
document.getElementById('vulnerability-impact').value = vuln.impact || '';
document.getElementById('vulnerability-recommendation').value = vuln.recommendation || '';
+ await populateVulnerabilityModalProjectSelect(vuln.project_id || '');
+
document.getElementById('vulnerability-modal').style.display = 'block';
} catch (error) {
console.error('加载漏洞失败:', error);
@@ -1069,8 +1136,11 @@ async function saveVulnerability() {
return;
}
+ const projectId = (document.getElementById('vulnerability-project-id')?.value || '').trim();
+
const data = {
conversation_id: conversationId,
+ project_id: projectId,
conversation_tag: document.getElementById('vulnerability-conversation-tag').value.trim(),
task_tag: document.getElementById('vulnerability-task-tag').value.trim(),
title: title,
@@ -1090,12 +1160,30 @@ async function saveVulnerability() {
: '/api/vulnerabilities';
const method = currentVulnerabilityId ? 'PUT' : 'POST';
+ let body = data;
+ if (currentVulnerabilityId) {
+ body = {
+ project_id: projectId,
+ conversation_tag: data.conversation_tag,
+ task_tag: data.task_tag,
+ title: data.title,
+ description: data.description,
+ severity: data.severity,
+ status: data.status,
+ type: data.type,
+ target: data.target,
+ proof: data.proof,
+ impact: data.impact,
+ recommendation: data.recommendation,
+ };
+ }
+
const response = await apiFetch(url, {
method: method,
headers: {
'Content-Type': 'application/json'
},
- body: JSON.stringify(data)
+ body: JSON.stringify(body)
});
if (!response.ok) {
@@ -1167,6 +1255,7 @@ function clearVulnerabilityFilters() {
'vulnerability-task-filter',
'vulnerability-conversation-tag-filter',
'vulnerability-task-tag-filter',
+ 'vulnerability-project-filter',
'vulnerability-severity-filter',
'vulnerability-status-filter'
];
@@ -1178,6 +1267,7 @@ function clearVulnerabilityFilters() {
vulnerabilityFilters = {
q: '',
id: '',
+ project_id: '',
conversation_id: '',
task_id: '',
conversation_tag: '',
@@ -1272,6 +1362,21 @@ function vulnerabilityCopyEncoded(evt, encoded) {
}
}
+function vulnDetailProjectField(vuln) {
+ const label = vulnT('vulnerabilityPage.detailProject');
+ const hint = escapeHtml(vulnT('vulnerabilityPage.projectBindHint'));
+ return `
+
${escapeHtml(label)}
+
+
+
+
`;
+}
+
function vulnDetailField(label, value, asCode) {
if (value === undefined || value === null || String(value) === '') {
return '';
@@ -1352,7 +1457,7 @@ function buildVulnerabilityFilterParams() {
if (vulnerabilityFilters.q) {
params.append('q', vulnerabilityFilters.q);
}
- const keys = ['id', 'conversation_id', 'task_id', 'conversation_tag', 'task_tag', 'severity', 'status'];
+ const keys = ['id', 'project_id', 'conversation_id', 'task_id', 'conversation_tag', 'task_tag', 'severity', 'status'];
keys.forEach(function (k) {
if (vulnerabilityFilters[k]) {
params.append(k, vulnerabilityFilters[k]);
@@ -1470,3 +1575,80 @@ document.addEventListener('languagechange', function () {
}
});
+async function bindVulnerabilityProject(vulnId, projectId, silent) {
+ if (!vulnId) return;
+ try {
+ const response = await apiFetch(`/api/vulnerabilities/${encodeURIComponent(vulnId)}`, {
+ method: 'PUT',
+ headers: { 'Content-Type': 'application/json' },
+ body: JSON.stringify({ project_id: projectId || '' }),
+ });
+ if (!response.ok) {
+ const err = await response.json().catch(() => ({}));
+ throw new Error(err.error || vulnT('vulnerabilityPage.projectBindFailed'));
+ }
+ if (!silent) {
+ alert(vulnT('vulnerabilityPage.projectBindOk'));
+ }
+ loadVulnerabilityStats();
+ loadVulnerabilities();
+ } catch (error) {
+ console.error('绑定项目失败:', error);
+ alert(vulnT('vulnerabilityPage.projectBindFailed') + ': ' + error.message);
+ loadVulnerabilities();
+ }
+}
+
+async function refreshVulnerabilityProjectFilter() {
+ const sel = document.getElementById('vulnerability-project-filter');
+ if (!sel) return;
+ try {
+ const res = await apiFetch('/api/projects?limit=200');
+ if (!res.ok) return;
+ const list = await res.json();
+ if (typeof rebuildProjectNameMap === 'function') {
+ rebuildProjectNameMap(list);
+ } else if (typeof projectNameById !== 'undefined') {
+ list.forEach((p) => { if (p.id) projectNameById[p.id] = p.name || p.id; });
+ }
+ const cur = vulnerabilityFilters.project_id || sel.value || '';
+ let html = '
';
+ (list || []).forEach((p) => {
+ if (!p.id) return;
+ const selected = p.id === cur ? ' selected' : '';
+ const arch = p.status === 'archived' ? ' [归档]' : '';
+ html += `
`;
+ });
+ sel.innerHTML = html;
+ if (cur) sel.value = cur;
+ const modalSel = document.getElementById('vulnerability-project-id');
+ if (modalSel && document.getElementById('vulnerability-modal')?.style.display === 'block') {
+ const modalCur = modalSel.value || '';
+ modalSel.innerHTML = buildVulnerabilityProjectOptionsHtml(modalCur);
+ modalSel.value = modalCur;
+ }
+ } catch (e) {
+ console.warn('加载项目筛选列表失败', e);
+ }
+}
+
+function setVulnerabilityProjectFilter(projectId) {
+ vulnerabilityFilters.project_id = projectId || '';
+ const sel = document.getElementById('vulnerability-project-filter');
+ if (sel) sel.value = projectId || '';
+ applyVulnerabilityFilters();
+}
+
+function setVulnerabilityIdFilter(vulnId) {
+ vulnerabilityFilters.id = vulnId || '';
+ const el = document.getElementById('vulnerability-exact-id-filter');
+ if (el) el.value = vulnId || '';
+ applyVulnerabilityFilters();
+}
+
+window.refreshVulnerabilityProjectFilter = refreshVulnerabilityProjectFilter;
+window.setVulnerabilityProjectFilter = setVulnerabilityProjectFilter;
+window.setVulnerabilityIdFilter = setVulnerabilityIdFilter;
+window.bindVulnerabilityProject = bindVulnerabilityProject;
+window.buildVulnerabilityProjectOptionsHtml = buildVulnerabilityProjectOptionsHtml;
+
diff --git a/web/templates/index.html b/web/templates/index.html
index af53fd00..b196fb60 100644
--- a/web/templates/index.html
+++ b/web/templates/index.html
@@ -161,6 +161,16 @@
任务管理