# HG changeset patch # User Benoît Allard # Date 1412601549 -7200 # Node ID a21f63c516eccb50f601f7fb5329714a008aa2e3 # Parent debdea976b8a73681f92b81cb4412a37ce57a6ae Add Descriptions for the edit_distribution and edit_severity diff -r debdea976b8a -r a21f63c516ec farol/templates/document/edit_distribution.j2 --- a/farol/templates/document/edit_distribution.j2 Mon Oct 06 15:13:04 2014 +0200 +++ b/farol/templates/document/edit_distribution.j2 Mon Oct 06 15:19:09 2014 +0200 @@ -29,7 +29,9 @@ {% block content %}
-{{ textarea("distribution", "Document Distribution", "", distribution) }} +{% call textarea("distribution", "Document Distribution", "", distribution) %} +

Document Distribution should contain details about constraints, if any, for sharing the CVRF document with additional recipients. Constraints may include instructions on how to reproduce, share, copy, or otherwise distribute the document.

+{% endcall %} Cancel
diff -r debdea976b8a -r a21f63c516ec farol/templates/document/edit_severity.j2 --- a/farol/templates/document/edit_severity.j2 Mon Oct 06 15:13:04 2014 +0200 +++ b/farol/templates/document/edit_severity.j2 Mon Oct 06 15:19:09 2014 +0200 @@ -29,8 +29,13 @@ {% block content %}
-{{ textinput("namespace", "Namespace", "https://", severity._namespace, type='url') }} -{{ textinput("severity", "Severity", "", severity._severity, help="If left empty, no Aggregate Severity will be set (i.e. no Namespace either).") }} +{% call textinput("namespace", "Namespace", "https://", severity._namespace, type='url') %} +

If one exists, the attribute Namespace should contain a URL pointing to the namespace so referenced.

+{% endcall %} +{% call textinput("severity", "Severity", "", severity._severity, + help="If left empty, no Aggregate Severity will be set (i.e. no Namespace either).") %} +

Aggregate Severity is provided by the document producer to convey the urgency and criticality with which the vulnerability or vulnerabilities should be addressed. It is a document-level metric and applied to the document as a whole—not any specific vulnerability. The range of values in this field is defined according to the document producer's policies and procedures. These values can be understood only in the context of the document producer's stated practices. Therefore, the values may vary widely depending on the source of the document. The field is independent of—and in addition to—any other standard metric for determining the impact or severity of a given vulnerability (such as CVSS).

+{% endcall %} Cancel