Add DefectDojo global reimport enhancement support

[yangsec888]

This PR is related to backend code change below:

• Issue #1622 DefectDojo integration reimport enhancement - Part 2  dependency-track#1738

Signed-off-by: Sam Li2 [email protected]

[sonatype-lift]

Severe OSS Vulnerability:

pkg:npm/vue-easy-pie-chart@git%2Bssh://git%40github.jparrowsec.cn/DependencyTrack/vue-easy-pie-chart.git%23e9a3bcb67b8156bcc422d160f522584a21ab0ff6

0 Critical, 1 Severe, 0 Moderate, 0 Unknown vulnerabilities have been found across 1 dependencies

Components

pkg:npm/[email protected]

SEVERE Vulnerabilities (1)




[sonatype-2019-0454] CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

vue - Cross-Site Scripting (XSS)

The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVSS Score: 6.1

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE: CWE-79

Reply with "@sonatype-lift help" for more info.
Reply with "@sonatype-lift ignore" to tell LiftBot to leave out the above finding from this PR.
Reply with "@sonatype-lift ignoreall" to tell LiftBot to leave out all the findings from this PR and from the status bar in Github.

When talking to LiftBot, you need to refresh the page to see its response. Click here to get to know more about LiftBot commands.

---

Was this a good recommendation?
[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

[nscuro]

Thanks for the PR @yangsec888! Could you please rebase the PR with the current master? Looks like it's carrying some unrelated changes in Alerts.vue.

[yangsec888]

Sorry I messed up the changes. It should be clean-up now. Please check it out again when you have the chance @nscuro