Repository navigation
Show the CVE field only when the Security section is selected - #474
Merged
Merged
Conversation
The CVE identifier only applies to Security entries, and the server rejects it for any other section. Hide the field until Security is chosen in the section dropdown, and clear it when the selection moves away so a stale value is never submitted.
Mariatta
force-pushed
the
cve-field-security-only
branch
from
October 21, 2026 20:16
edeff2d to
125a0a9
Compare
Neither mentioned the field. Say that it appears for Security entries, the form it takes, and that it is stored as .. cve: metadata in the news file.
Mariatta
force-pushed
the
cve-field-security-only
branch
from
October 21, 2026 20:26
09113de to
1e7cd10
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The CVE identifier only applies to Security entries, and the server already rejects a CVE given with any other section (#470). The form, however, always showed the field, which invited people to fill it in for other sections and then hit the error on submit.
This hides the CVE field until "Security" is chosen in the section dropdown, and clears any typed value when the selection moves to another section, so a stale value is never submitted. The toggle also runs on page load, so the field is correct when the browser restores a previous selection.
The help text no longer needs to say "for a Security entry only", since the field now only appears in that case. The server-side check is unchanged.
The readme and the howto page now describe the field, since neither mentioned it before.
Demo
Full-resolution recording:
Screen.Recording.2026-10-21.at.12.54.04.PM.mov