feat: Link to project using name and version by WIStudent · Pull Request #1425 · DependencyTrack/frontend

WIStudent · 2026-01-19T15:41:53Z

Description

This is another try to implement project links that use name and version and do not require uuid. The previous try at #45 seems to be abandoned.

Addressed Issue

resolves #41

Additional Details

This PR adds two additional vue routes:

`projects/:name/:version/*`

Its beforeEach navigation guard tries to lookup the uuid of the project using the /v1/project/lookup API endpoint. If a uuid was found, it redirects to projects/:uuid. If not, it redirects to the 404 page.

The /* at the end is used to keep trailing subpaths.

projects/MyProject/1.2.3/ -> projects/:uuid
projects/MyProject/1.2.3/components -> projects/:uuid/components

`projects/:name/:version`

The projects/:name/:version/* route will not match projects/MyProject/1.2.3 because it does not end with a /. That's why projects/:name/:version will redirect to projects/:name/:version/.

projects/:name/:version -> projects/:name/:version/ -> projects/:uuid

Checklist

I have read and understand the contributing guidelines
This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

owasp-dt-bot · 2026-01-19T15:42:10Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot

Pull request overview

This PR implements a feature to allow linking to projects using their name and version instead of requiring the UUID. It adds two new Vue Router routes that perform a lookup of the project UUID via a new API endpoint and redirect to the existing UUID-based project routes.

Changes:

Added URL_PROJECT_LOOKUP API endpoint constant for project lookup by name and version
Added projects/:name/:version/* route with navigation guard that looks up UUID and redirects to UUID-based routes
Added projects/:name/:version route that redirects to the wildcard variant with a trailing slash

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
src/shared/api.json	Adds the URL constant for the new project lookup API endpoint
src/router/index.js	Implements two new routes to support name/version-based project linking with UUID lookup and redirection logic

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

src/router/index.js

Copilot · 2026-01-19T15:45:31Z

src/router/index.js

+                  path: `projects/${result.data.uuid}${trailingPathSegments}`,
+                  replace: true,
+                });
+              })
+              .catch(() => {
+                next({
+                  name: '404',


Query parameters from the original URL are not preserved during the redirect. If the original URL contains query parameters (e.g., for filtering or sorting), they will be lost. Consider preserving them by including query: to.query in the next() object alongside the path.

Suggested change

path: `projects/${result.data.uuid}${trailingPathSegments}`,

replace: true,

});

})

.catch(() => {

next({

name: '404',

path: `projects/${result.data.uuid}${trailingPathSegments}`,

query: to.query,

replace: true,

});

})

.catch(() => {

next({

name: '404',

query: to.query,

I don't think this is necessary, neither the 404 page nor the project page seem to use query parameters.

Copilot · 2026-01-19T15:45:32Z

src/router/index.js

+              .catch(() => {
+                next({
+                  name: '404',
+                  replace: true,
+                });


The error handling catches all errors uniformly, but different error types should potentially be handled differently. For example, a 404 (not found) is different from a 401 (unauthorized) or 500 (server error). Consider checking the error response status to provide more appropriate error handling, especially for authorization errors which might need different treatment than simple "not found" scenarios.

Suggested change

.catch(() => {

next({

name: '404',

replace: true,

});

.catch((error) => {

const status = error && error.response && error.response.status;

if (status === 404) {

next({

name: '404',

replace: true,

});

} else if (status === 401 || status === 403) {

next({

name: 'Login',

replace: true,

});

} else {

// Cancel navigation on unexpected errors to avoid misreporting them as "not found"

next(false);

}

I don't think this is necessary, both the project page and the lookup require the VIEW_PORTFOLIO permission. If the user doesn't have it, the global forEach navigation guard will redirect to the login page and the beforeEnter navigation guard in the Project By Name and Version route will not be called.

Copilot · 2026-01-19T15:45:32Z

src/router/index.js

+            const searchParams = new URLSearchParams({
+              name: to.params.name,
+              version: to.params.version,


Project names and versions may contain special characters that need URL encoding. The current implementation doesn't decode these parameters before sending them to the API. If a project name contains special characters (e.g., spaces, slashes), the URL parameters extracted from to.params will already be decoded by Vue Router, but this should be verified. Additionally, consider validating that the name and version parameters don't contain path separators or other invalid characters that could cause routing issues.

Suggested change

const searchParams = new URLSearchParams({

name: to.params.name,

version: to.params.version,

const decodeParam = (value) => {

if (typeof value !== 'string') {

return '';

}

try {

return decodeURIComponent(value);

} catch (e) {

// If decoding fails (malformed escape sequences), fall back to the original value

return value;

}

};

const isValidSegment = (value) =>

typeof value === 'string' && !/[\\/]/.test(value);

const name = decodeParam(to.params.name);

const version = decodeParam(to.params.version);

if (!isValidSegment(name) || !isValidSegment(version)) {

next({

name: '404',

replace: true,

});

return;

}

const searchParams = new URLSearchParams({

name,

version,

Spaces and slashes are not a problem if encoded properly, vue-router will decode this /projects/Test%20%2FABC/0.0.1/ to name Test /ABC and URLSearchParams will encode it correctly.

Copilot · 2026-01-19T15:45:32Z

src/router/index.js

+                  path: `projects/${result.data.uuid}${trailingPathSegments}`,
+                  replace: true,
+                });
+              })
+              .catch(() => {
+                next({
+                  name: '404',


URL hash fragments are not preserved during the redirect. If the original URL contains a hash (e.g., for in-page navigation or state), it will be lost. Consider preserving the hash by including hash: to.hash in the next() object alongside the path.

Suggested change

path: `projects/${result.data.uuid}${trailingPathSegments}`,

replace: true,

});

})

.catch(() => {

next({

name: '404',

path: `projects/${result.data.uuid}${trailingPathSegments}`,

hash: to.hash,

replace: true,

});

})

.catch(() => {

next({

name: '404',

hash: to.hash,

I don't think this is necessary, neither the 404 page nor the project page seem to use hash fragments.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

feat: Link to project using name and version

0bad0e7

Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

Copilot AI review requested due to automatic review settings January 19, 2026 15:41

Copilot started reviewing on behalf of WIStudent January 19, 2026 15:42 View session

Copilot AI reviewed Jan 19, 2026

View reviewed changes

WIStudent and others added 2 commits March 10, 2026 17:39

Apply suggestions from code review

46a1d85

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

Reencode name and version when redirecting

059926f

Signed-off-by: Tobias Trumm <tobias@tobiastrumm.de>

WIStudent force-pushed the feat/link-project-by-name-version branch from 0677a1b to 059926f Compare March 10, 2026 17:48

WIStudent requested a review from Copilot March 10, 2026 17:50

Copilot started reviewing on behalf of WIStudent March 10, 2026 17:50 View session

Copilot AI reviewed Mar 10, 2026

View reviewed changes

WIStudent mentioned this pull request Mar 11, 2026

Link to project page by name and version #41

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: Link to project using name and version#1425

feat: Link to project using name and version#1425
WIStudent wants to merge 3 commits intoDependencyTrack:masterfrom
WIStudent:feat/link-project-by-name-version

WIStudent commented Jan 19, 2026

Uh oh!

owasp-dt-bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 19, 2026

Uh oh!

WIStudent Mar 10, 2026

Uh oh!

Copilot AI Jan 19, 2026

Uh oh!

WIStudent Mar 10, 2026

Uh oh!

Copilot AI Jan 19, 2026

Uh oh!

WIStudent Mar 10, 2026

Uh oh!

Copilot AI Jan 19, 2026

Uh oh!

WIStudent Mar 10, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

-              .catch(() => {
-                next({
-                  name: '404',
-                  replace: true,
-                });
+              .catch((error) => {
+                const status = error && error.response && error.response.status;
+                if (status === 404) {
+                  next({
+                    name: '404',
+                    replace: true,
+                  });
+                } else if (status === 401 || status === 403) {
+                  next({
+                    name: 'Login',
+                    replace: true,
+                  });
+                } else {
+                  // Cancel navigation on unexpected errors to avoid misreporting them as "not found"
+                  next(false);
+                }

-            const searchParams = new URLSearchParams({
-              name: to.params.name,
-              version: to.params.version,
+            const decodeParam = (value) => {
+              if (typeof value !== 'string') {
+                return '';
+              }
+              try {
+                return decodeURIComponent(value);
+              } catch (e) {
+                // If decoding fails (malformed escape sequences), fall back to the original value
+                return value;
+              }
+            };
+            const isValidSegment = (value) =>
+              typeof value === 'string' && !/[\\/]/.test(value);
+            const name = decodeParam(to.params.name);
+            const version = decodeParam(to.params.version);
+            if (!isValidSegment(name) || !isValidSegment(version)) {
+              next({
+                name: '404',
+                replace: true,
+              });
+              return;
+            }
+            const searchParams = new URLSearchParams({
+              name,
+              version,

Uh oh!

Conversation

WIStudent commented Jan 19, 2026

Description

Addressed Issue

Additional Details

projects/:name/:version/*

projects/:name/:version

Checklist

Uh oh!

owasp-dt-bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 19, 2026

Choose a reason for hiding this comment

Uh oh!

WIStudent Mar 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 19, 2026

Choose a reason for hiding this comment

Uh oh!

WIStudent Mar 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 19, 2026

Choose a reason for hiding this comment

Uh oh!

WIStudent Mar 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 19, 2026

Choose a reason for hiding this comment

Uh oh!

WIStudent Mar 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

`projects/:name/:version/*`

`projects/:name/:version`

owasp-dt-bot commented Jan 19, 2026 •

edited

Loading