From 37cb7de1eecda44a0867cbc1a8b9a1c6164f3c5e Mon Sep 17 00:00:00 2001
From: Sebastian Reitenbach <sebastia@planet.com>
Date: Mon, 22 Feb 2021 17:40:03 +0100
Subject: [PATCH] For VirusTotal_Scan long report summary, check if
 content.permalink exists, and use that to link back to VirusTotal report
 instead of hand-crafted link, only when the scan was a scan of a URL.

---
 thehive-templates/VirusTotal_Scan_3_0/long.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/thehive-templates/VirusTotal_Scan_3_0/long.html b/thehive-templates/VirusTotal_Scan_3_0/long.html
index 8bdaee657..d3275fc6a 100644
--- a/thehive-templates/VirusTotal_Scan_3_0/long.html
+++ b/thehive-templates/VirusTotal_Scan_3_0/long.html
@@ -21,12 +21,12 @@
                     <dt>Last analysis date</dt>
                     <dd>{{content.scan_date}}</dd>
                 </dl>
-                <dl class="dl-horizontal" ng-if="artifact.dataType === 'url'">
+                <dl class="dl-horizontal" ng-if="content.permalink">
                     <dt>Virus Total</dt>
                     <dd>
                         <span>
                             <i class="fa fa-search"></i>
-                            <a ng-href="https://www.virustotal.com/en/url/{{artifact.data | sha256}}/analysis/" target="_blank">
+                            <a href="{{content.permalink}}" target="_blank">
                                 View Full Report</a>
                         </span>
                     </dd>