How can I use document properties inside finding description?

1

Hello everyone !

I was wondering if it was possible to use the Dradis document properties inside an issue field.

For example, imagine I have something like this as an issue in my project.

#[Title]#
Vulnerability name

#[Observation]#
We observed during the test that <client Name> is vulnerable […]

#[Recommendation]#
We recommend that <client Name> […]

In this scenario, is there a way to replace <client Name> by the actual client name using dradis.client ?

Otherwise if you have any suggestion on how to achieve something similar would be really helpful

Thanks for your help

2

Hi @airshot - Tabatha with the Dradis support team here. Currently, there is no way to use document properties inside of issues, evidence, or content blocks. It isn’t as elegant, but you could leave a placeholder in your issue. Once the report is generated, it would make “find and replace all” or a macro to replace the placeholder with a client name straightforward to run.

3

Ok this is probably the way I will do it then, thanks :slight_smile:

5

Any updates on this issue? Supporting document properties in issues/contentblocks would be very handy.

6

Not just handy, but expected. Why would Word macros even do such stuff or any whatsoever? You should only double check in Word, not use it as a report writing tool. Ideally, you should export directly in PDF from Dradis and that should be it.

7

@pieterjm, @anterk

This is indeed possible since Dradis 4.x use the liquid syntax:

{{ document_properties.<property_name> }}

Give it a go and let us know how it goes!

2 Likes