Merge pull request #1335 from CVEProject/dev

Update Int from Dev

Author: jdaigneau5

src/constants/index.js

@@ -101,7 +101,7 @@ function getConstants () {
     // Ajv's pattern validation uses the "u" (unicode) flag:
     // https://ajv.js.org/json-schema.html#pattern
     CVE_ID_REGEX: new RegExp(cveSchemaV5.definitions.cveId.pattern, 'u'),
-    DATE_FIELDS: ['cveMetadata.datePublished', 'cveMetadata.dateUpdated', 'cveMetadata.dateReserved', 'providerMetadata.dateUpdated', 'datePublic', 'dateAssigned'
+    DATE_FIELDS: ['cveMetadata.datePublished', 'cveMetadata.dateUpdated', 'cveMetadata.dateReserved', 'cveMetadata.dateRejected', 'providerMetadata.dateUpdated', 'datePublic', 'dateAssigned'
     ]
   }
 

src/controller/cve-id.controller/cve-id.controller.js

@@ -149,8 +149,14 @@ async function getFilteredCveId (req, res, next) {
           // No redaction, original requested_by.user is in requested_by.cna and owning_cna
           i.requested_by.user = orgMap[cnaid].users[i.requested_by.user]
         }
-
         i.owning_cna = orgMap[i.owning_cna].shortname
+        // Finally, if the user is bulk download, redact the entire requested by object and owning cna
+        if (isBulkDownload) {
+          i.owning_cna = 'REDACTED'
+          i.requested_by.user = 'REDACTED'
+          i.requested_by.cna = 'REDACTED'
+        }
+
         return i
       })
     }