Issue with v4.1 and extra fields about ghostwriter HOT 4 CLOSED

Hi Felix Caboff,

Ghostwriter v4.1 now processes rich text fields as Jinja2 templates. This can cause issues with existing text if it has "{{" or "{%" somewhere in it, since those are now processed as Jinja2 substitutions. You can use {{ "{{" }} to escape it or surround the text in {% raw %} and {% endraw %} to prevent Jinja2 from processing the text.

The line finding["description_rt"] = finding_render(finding["description"]) in your error indicates that it comes from the description of a finding (we're working on better reporting of where the error comes from).

from ghostwriter.

Hey C32,

I will look into this, but, it fails to generate several different reports of different types and with no common findings. It feels unlikely that your idea is the cause, but like I said, I am happy to be proven wrong.

from ghostwriter.

Well, I am happy to report that you were correct. I found a text-based evidence piece inside a description a finding that included {% and that was the issue. Got to be honest, this is confusing as hell as there are so many debugging steps that I took that would suggest this isn't the case. Shrug. Thank you for your suggestion.

from ghostwriter.

Glad you fixed it. We're working on improving the handling of these errors to hopefully catch them earlier and give more direction as to where it occurred. PR #426 is a first step which will hopefully be merged and released soon.

from ghostwriter.