search

rapid7 / attackerkb

Repo for creating-and-tracking issues related to AttackerKB
11 stars 2 forks source link

"Create New Topic" should always be available - MIGRATED ISSUE #10

Open pbarry-r7 opened 4 years ago

pbarry-r7 commented 4 years ago

https://attackerkb.com/search?q=firepower turns up a bunch of issues, none of which match CVE-2019-16028. If I plug in https://attackerkb.com/search?q=CVE-2019-16028, I get no results, and then I can create a new topic for it.

pbarry-r7 commented 4 years ago

"A search for that CVE on CVE List shows a RESERVED entry. I can't recall if maybe we're not populating those into AKB..."

pbarry-r7 commented 4 years ago

"I think the issue is more related to the fact that when searching for a topic, the search results page never shows the option to actually create a new topic unless no results are found. There should be a button somewhere near the top of the page to create a new topic regardless of whether or not there were any search results found, rather than just if no results were found at all.

Edit: Moreover I think the point is really that the button should be available on most pages (perhaps not the About page though) so that user's can quickly view it."

pbarry-r7 commented 4 years ago

"I think someone raised the potential issue that the feature could be abused by spammers, but the topic creation page isn't exactly hidden. Would appreciate clarification on the strategy for topic creation."

pbarry-r7 commented 4 years ago

"The reason we only show the create new topic button when no search results are found is because we were using it as a first iteration of helping to prevent duplicate topics. The thought behind it was that putting the button at the top might cause people to just start creating topics before searching to see if what they were looking for already existed.

Ideally, I think making a top level button available but having some sort of autocomplete available when creating the topic that searches for similar topics that might already exist would be a better implementation here. What do you all think?"

pbarry-r7 commented 4 years ago

"Autocomplete would be nice, so long as it's clear when no topics are found."

pbarry-r7 commented 4 years ago

"That is correct. RESERVED entries are not populated because there is no info with which to populate"