Hi,
I played with the nessus.xsl (found at
http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/nessus-tools/xsl/nessus.xsl)
and find a little bug in it. The 'issues and fix' column is empty using this
stylesheet. After a little investigation, I found it's caused by the
none-existence of "<p></p>" tags in the XML report's data field. The style
sheet looks for '<p></p>' tag to render the vulnerability data description.
Two ways to fix this, either add '<p></p>' inside '<data></data>' tags in
the xml output (change in nessus-core?) or apply a small patch like this to
the nessus.xsl file:
--- nessus.xsl?rev=1.1 Mon Apr 11 13:44:51 2005
+++ nessus.xsl Mon Apr 11 13:49:09 2005
@@ -328,7 +328,8 @@
</xsl:template>
-<xsl:template match="p">
+<xsl:template match="data">
+ <tr><td valign="top" class="default" width="100%">
<xsl:choose>
<xsl:when test="contains(.,'CVE : ')">
<xsl:value-of select="substring-before(.,'CVE :')"/>
@@ -351,12 +352,6 @@
<xsl:value-of select="."/>
</xsl:otherwise>
</xsl:choose>
- <br/>
-</xsl:template>
-
-<xsl:template match="data">
- <tr><td valign="top" class="default" width="100%">
- <xsl:apply-templates select="p"/>
</td></tr>
</xsl:template>
-Lei
-------
Lei Li 404.486.4451 <[EMAIL PROTECTED]>
Security Researcher, SecureWorks Inc.
PGP Public Key ID 0x9E57099F at http://www.keyserver.de
Fingerprint: 8116 C450 D826 67C7 EAFC CE96 98A2 A22A 9E57 099F
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
