cveRecordSearchModule: add clarification about database used for search; change illegal search characters

Author: rlxdev

src/assets/data/faqs.json

@@ -272,7 +272,7 @@
 				"questionText": "How do I search the CVE List",
 				"questionResponseParagraphs": [
 					"<b><i>Search Tips<i></b>",
-					"<ul><li>By CVE ID<ul><li>Must include only one CVE ID per search.</li><li>CVE ID must include all letters, numbers, and hyphens associated with the CVE ID, e.g., CVE-2024-12345678.</li><li>“CVE” may be entered as “cve”, “CVE”, or as a combination of uppercase and lowercase, as casing is ignored during search.</li></ul></li><li>By other keyword(s)<ul><li>May contain words of alphanumeric characters and certain symbols (i.e., punctuation).<li>Must not contain any of the following symbols: <pre>() {} [] \" ' ` &lt; &gt; + = | ; ! ~ ^ *</pre></li></li><li>May contain one or more keywords, separated by a space.</li><li>Keywords may be entered in lowercase, uppercase, or a combination of both. Casing is ignored during search, e.g., Vulnerabilities, vulnerabilities, VULNERABILITIES.</li></ul></li></ul>"
+					"<ul><li>By Specific CVE ID<ul><li>Must include only one CVE ID per search.</li><li>CVE ID must include all letters, numbers, and hyphens associated with the CVE ID, e.g., CVE-2024-12345678.</li><li>“CVE” may be entered as “cve”, “CVE”, or as a combination of uppercase and lowercase, as casing is ignored during search.</li></ul></li><li>Multiple CVE IDs<ul><li>If you provide multiple CVE IDs, the search will only return results that refer to every CVE ID you specify, which may not be what you expect.</li><li>You may enter partial CVE IDs, for example <pre>cve-2022 cve-2024</pre> that will look for records referring to CVE IDs for BOTH years, which may yield better results than specifying complete CVE IDs.</li></ul></li><li>By other keyword(s)<ul><li>May contain words of alphanumeric and Unicode characters, as well as certain symbols (i.e., punctuation).<li>Must not contain any of the following symbols:<pre>() {} [] \" ' ` <> | ; ! ~ ^ * + %</pre></li></li><li>May contain one or more keywords, separated by a space.</li><li>Keywords may be entered in lowercase, uppercase, or a combination of both. Casing is ignored during search, e.g., Vulnerabilities, vulnerabilities, VULNERABILITIES.</li></ul></li></ul>"
 				]
 			},
 			{

src/components/cveRecordSearchModule.vue

@@ -8,11 +8,23 @@
           <font-awesome-icon size="1x"  icon="exclamation-triangle" role="alert"
             aria-labelledby="alertIconVariousFormts" aria-hidden="false" />
         </div>
-        <div class="is-flex-grow-5">
+        <div v-if="searchTypeBoolean" class="is-flex-grow-5">
           <p class="is-size-7">
             <span class="has-text-weight-bold">CNAs</span> – to view your <span class="has-text-weight-bold">test data</span>
             (your draft records) select “<span class="has-text-weight-bold">Find a Test CVE Record/ID (Legacy)</span>” in the drop-down menu and
             provide a CVE ID to find a specific CVE Record.
+            <br>
+            <span class="has-text-weight-bold">NOTE for Production Data Search:</span>
+            The following characters are <span class="has-text-weight-bold">NOT</span>
+            allowed in search terms:
+            <span class="is-family-monospace is-size-6">{{ invalidSearchCharacters }}</span>
+          </p>
+        </div>
+        <div v-else class="is-flex-grow-5">
+          <p class="is-size-6">
+            You are searching CVE records in the <span class="has-text-weight-bold">TEST</span>
+            database.  Enter <span class="has-text-weight-bold">only ONE</span>
+            CVE ID.
           </p>
         </div>
       </div>
@@ -79,8 +91,9 @@ const route = useRoute();
 const router = useRouter();
 
 const cveRecordRouteName = 'CVERecord';
+const invalidSearchCharacters = ref('(){}[]"\'`<>|\;!~^*+%');
 const legacyOptionLabel = 'Find a Test CVE Record/ID (Legacy)';
-const searchOptionLabel = 'Search CVE List';
+const searchOptionLabel = 'Search CVE List (Production Data)';
 
 let queryString = ref('');
 
@@ -318,7 +331,7 @@ function allValidCharacters(searchString) {
   // otherwise.  The error message is also set to indicate the invalid
   // characters found in the string.
 
-  const invalidCharacters = '(){}[]"\'`<>+=|\;!~^*'.split('');
+  const invalidCharacters = invalidSearchCharacters.value.split('');
 
   const found = invalidCharacters.filter(i => searchString.includes(i));
 

src/stores/cveListSearch.js

@@ -193,9 +193,26 @@ export const useCveListSearchStore = defineStore('cveListSearch ', {
 
           const searchMetaData = response.data.searchMetadata;
 
+          // Until the search service returns search and/or server errors as
+          // 400 & 500 response codes, it'll return a message starting with
+          // the following, and it really indicates that there is a problem
+          // with the user's input (the placement of symbols in the search
+          // term(s)).  We are going to present the user with a different
+          // message for now.
+
+          const serverErrorText = 'Server error. Please try again later';
+
           if (searchMetaData.searchStatus === 'ok') {
             this.totalSearchResultCount = response.data.resultsTotal;
             this.processSearchResults(response.data.data);
+          } else if (searchMetaData.errors.length == 1
+                     && searchMetaData.errors[0].message.startsWith(serverErrorText)) {
+
+            const message = 'Search returned no results, possibly due to '
+              + 'placement and/or use of symbols (punctuation) in your '
+              + 'search terms.';
+
+              ems.pushErrorMessage(message);
           } else {
             // There's likely something invalid in the search string.
             // Error message(s) and note(s) returned in the response will be