Merge ~emitorino/ubuntu-cve-tracker:indent_text_when_displaying_cve_information into ubuntu-cve-tracker:master

[Emilia Torino]

- scripts/detect_priorities_mismatches.py: indent text to avoid being interpreted as a cmd

This change aims to fix the issue described in https://code.launchpad.net/~emitorino/ubuntu-cve-tracker/+git/ubuntu-cve-tracker/+merge/459935/comments/1243925, where a CVE description including a character like * is interpreted as a command and failed.

diff --git a/scripts/detect_priorities_mismatches.py b/scripts/detect_priorities_mismatches.py
index 0d249da..f38ee5b 100755
--- a/scripts/detect_priorities_mismatches.py
+++ b/scripts/detect_priorities_mismatches.py
@@ -52,7 +52,6 @@ def process_command_file(cves_output_content):
     invalid_lines = dict()
     for line in cves_output_content.readlines():
         line_number += 1
-        line = line.strip()
 
         # We only want to action on lines starting with *
         if not line or not line.startswith('*'):
@@ -186,6 +185,10 @@ def spawn_editor(path):
     subprocess.call([editor, path])
 
 
+def indent_content(text):
+    return text.replace("\n", "\n ")
+
+
 if __name__ == "__main__":
     parser = argparse.ArgumentParser()
     parser.add_argument(
@@ -268,7 +271,7 @@ if __name__ == "__main__":
         for index, cve in enumerate(cves_with_mismatches):
             # Provide basic CVE metadata
             output.write(f"\n\n=========== {index + 1}/{total_cves_to_process}: {cve} ===========")
-            output.write(f"{cves_with_mismatches[cve]['Description']}")
+            output.write(f"  {indent_content(cves_with_mismatches[cve]['Description'])}")
             output.write(f"\n- Public Date: {cves_with_mismatches[cve]['PublicDate']}")
             output.write(f"\n- Ubuntu Priority: {cves_with_mismatches[cve]['Priority'][0]} || CVSS Severity: {get_cvss_base_severity(cves_with_mismatches[cve]['CVSS'])}")
             output.write(f"\n- Affected packages: {', '.join(cves_with_mismatches[cve]['pkgs'].keys())}")