CVSS vector should be generated in Base/Threat/Environmental/Supplemental order

[ViperGeek]

When we asked to reorder the Base and Supplemental sections of the GUI, the vector string got inadvertently reordered as well. In all our docs, JSON, and regex, the official order of the CVSS vector string is:

AV/AC/AT/PR/UI/V[CIA]/S[CIA]/E/[CIA]R/MAV/MAC/MAT/MPR/MUI/MV[CIA]/MS[CIA]/S/AU/R/V/RE/U

(Base/Threat/Environmental/Supplemental)

Please keep the GUI arrangement as-is, but update the vector string generation order.

[pandatix]

Fixed by #35, merged 🎉

[ViperGeek]

This may be unrelated to this fix, but it seems like the Supplemental Metrics no longer "stick" when selected:

https://redhatproductsecurity.github.io/cvss-v4-calculator/

[pandatix]

Thanks for the info Dave, I'll test it and provide a fix as soon as possible :)

EDIT: easy to diagnose, I did not implement the behavior of (non-)mandatory metrics, working on it.