{% extends "report_base.html" %}
{% load static from staticfiles %}
{% load display_tags %}
{% load humanize %}
{% load get_endpoint_status %}
{% load get_note_status %}
{% load event_tags %}
{% block content %}
    <div class="container">
        {% if include_table_of_contents%}
			<div class="row">
				<div class="col-lg-12" id="toc">
					<h3 id="table_of_contents">Table of Contents for {{ product.name }}</h3>
				</div>
			</div>

			<div id="contents">
		{% endif %}
        {% if include_executive_summary %}
            <div class="row">
                <div class="col-lg-12">
                    <h3 id="executive">Executive Summary</h3>
                    <p>
                        This report represents a security audit performed by the {{ team_name }} team.
                        It contains confidential information about the state of your network and applications.
                        Access to this information by unauthorized personnel may allow them to compromise your network.
                    </p>
                </div>
                <div class="col-lg-12">
                    {% if product_type %}
                        {% for prod in products %}
                            <h4>{{ prod.name }}</h4>
                            {% if prod.engagement_set.all %}
                                {% for eng in prod.engagement_set.all %}
                                    {% if eng in engagements %}
                                        <p>
                                            {% if eng.name  and eng.name|length > 0 %}
                                                The {{ eng.name }}
                                            {% else %}
                                                An
                                            {% endif %}
                                            engagement ran from {{ eng.target_start|date:"SHORT_DATE_FORMAT" }}
                                            {% if eng.target_end %}
                                                to {{ eng.target_end|date:"SHORT_DATE_FORMAT" }}.
                                            {% else %}
                                                and is ongoing.
                                            {% endif %}
                                        </p>
                                        {% if eng.test_set %}
                                            <p>
                                                The engagement also included the following tests which may be reported
                                                here:
                                            </p>
                                            <ul>
                                                {% for t in eng.test_set.all %}
                                                    {% if t in tests %}
                                                        <li>{{ t.test_type.name }}
                                                            ({{ t.environment.name|default:"unknown" }}):
                                                            {{ t.target_start|date:"SHORT_DATE_FORMAT" }}
                                                        </li>
                                                    {% endif %}
                                                {% endfor %}
                                            </ul>
                                        {% endif %}
                                        {% if eng.test_strategy %}
                                            <p>
                                                The test strategy for this engagement can be viewed at
                                                <a href="{{ eng.test_strategy }}">{{ eng.test_strategy }}</a><br/><br/>
                                            </p>
                                        {% endif %}
                                    {% endif %}
                                {% endfor %}
                            {% else %}
                                <p>No engagements found for {{ prod.name }}</p>
                            {% endif %}
                        {% endfor %}
                    {% endif %}
                    <p>
                        A total of {{ findings|length|apnumber }} finding{{ findings|length|pluralize }} of varying
                        severity are represented in this report.
                    </p>
                </div>
                <div class="col-md-6">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                            <h4>
                                Engagement Finding Count
                            </h4>
                        </div>
                        <div class="panel-body">
                            <div id="open_findings" class="graph"></div>
                        </div>
                    </div>
                </div>
                <div class="col-lg-6">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                            <h4>
                                Opened bug count by month
                            </h4>
                        </div>
                        <!-- /.panel-heading -->
                        <div class="panel-body">
                            <div id="opened_per_month" class="graph"></div>
                        </div>
                        <!-- /.panel-body -->
                    </div>
                    <!-- /.panel -->
                </div>
            </div>
        {% endif %}

        <div class="row">
            <div class="col-lg-12">
                {% if findings %}
                    <h3 id="findings">Findings</h3>
                {% endif %}
                {% for finding in findings %}
                    {% ifchanged finding.severity %}
                        <h4>{{ finding.severity|capfirst }}</h4>
                    {% endifchanged %}
                    <div class="panel panel-default">
                        <div class="panel-heading finding-title">
                            <div class="clearfix">
                                <h5>
                                    Finding {{ finding.id }}: {{ finding.title }}
                                    {% if finding.tags %}
                                        <sup>
                                            {% for tag in finding.tags %}
                                            {{ tag }}
                                            {% endfor %}
                                        </sup>
                                    {% endif %}
                                </h5>
                            </div>
                        </div>
                        <div class="table-responsive">
                            <table id="notes" class="table-striped table table-condensed table-hover centered">
                                <tr>
                                    <th>Severity</th>
                                    <th>Status</th>
                                    {% if finding.risk_acceptance_set.all %}
                                        <th>Acceptance</th>
                                    {% endif %}
                                    <th>Date discovered</th>
                                    <th>Age</th>
                                    <th>Reporter</th>
                                    {% if finding.mitigated %}
                                        <th>Date Mitigated</th>
                                        <th>Mitigated By</th>
                                    {% endif %}
                                    {% if finding.cwe > 0 %}
                                        <th>CWE</th>
                                    {% endif %}
                                </tr>
                                <tr>
                                    <td>
                                    <span class="label severity severity-{{ finding.severity }}">
                                        {% if finding.severity %}
                                            {{ finding.severity }}
                                        {% else %}
                                            Unknown
                                        {% endif %}
                                    </span>
                                    </td>
                                    <td>{{ finding.status }}</td>
                                    {% if finding.risk_acceptance_set.all %}
                                        <td>
                                            <a href="{% url 'view_risk' finding.test.engagement.id finding.risk_acceptance_set.all.0.id %}">
                                                View Risk Acceptance</a>
                                        </td>
                                    {% endif %}
                                    <td>{{ finding.date }}</td>
                                    <td>{{ finding.age }} days</td>
                                    <td>{{ finding.reporter }}</td>
                                    {% if finding.mitigated %}
                                        <td>{{ finding.mitigated }}</td>
                                        <td>{{ finding.mitigated_by }}</td>
                                    {% endif %}
                                    {% if finding.cwe > 0 %}
                                        <td>
                                            <a target="_blank"
                                               href="https://cwe.mitre.org/data/definitions/{{ finding.cwe }}.html">
                                                <i class="fa fa-external-link"></i> {{ finding.cwe }}
                                            </a>
                                        </td>
                                    {% endif %}

                                </tr>
                            </table>
                        </div>
                    </div>
                    {% with endpoints=finding.endpoints.all|get_vulnerable_endpoints %}
                        {% if endpoints %}
                            <div class="row">
                                <div class="col-md-12">
                                    <div class="panel panel-info endpoints table-responsive">
                                        <div class="panel-heading">
                                            {% if finding.file_path %}
                                            <h6> Location </h6>
                                            {%  else %}
                                            <h6>Vulnerable Endpoints / Systems</h6>
                                            {% endif %}
                                        </div>

                                        {% if endpoints %}
                                            {% colgroup endpoints into 2 cols as grouped_items %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                {% for row in grouped_items %}
                                                    <tr>
                                                        {% for item in row %}
                                                            <td>{% if item %}<i class="fa fa-circle"></i>
                                                                {{ item }}{% endif %}
                                                            </td>
                                                        {% endfor %}
                                                    </tr>
                                                {% endfor %}
                                            </table>
                                        {% elif finding.file_path %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                <tr>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        File Path
                                                    </th>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        Line Number
                                                    </th>
                                                </tr>
                                                <tr>
                                                    <td style="padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.file_path }}</td>
                                                    <td style=" text-align:center; padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.line }}</td>
                                                </tr>
                                            </table>
                                        {% else %}
                                            <div id="vuln_endpoints" class="panel-body endpoint-panel table-responsive">
                                                No endpoints.
                                            </div>
                                        {% endif %}
                                    </div>
                                </div>
                            </div>
                        {% endif %}
                    {% endwith %}

                    {% with endpoints=finding.endpoints.all|get_remediated_endpoints %}
                        {% if endpoints %}
                            <div class="row">
                                <div class="col-md-12">
                                    <div class="panel panel-info endpoints table-responsive">
                                        <div class="panel-heading">
                                            {% if finding.file_path %}
                                            <h6> Location </h6>
                                            {%  else %}
                                            <h6>Remediated Endpoints / Systems</h6>
                                            {% endif %}
                                        </div>

                                        {% if endpoints %}
                                            {% colgroup endpoints into 2 cols as grouped_items %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                {% for row in grouped_items %}
                                                    <tr>
                                                        {% for item in row %}
                                                            <td>{% if item %}<i class="fa fa-circle"></i>
                                                                {{ item }}{% endif %}
                                                            </td>
                                                        {% endfor %}
                                                    </tr>
                                                {% endfor %}
                                            </table>
                                        {% elif finding.file_path %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                <tr>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        File Path
                                                    </th>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        Line Number
                                                    </th>
                                                </tr>
                                                <tr>
                                                    <td style="padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.file_path }}</td>
                                                    <td style=" text-align:center; padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.line }}</td>
                                                </tr>
                                            </table>
                                        {% else %}
                                            <div id="vuln_endpoints" class="panel-body endpoint-panel table-responsive">
                                                No endpoints.
                                            </div>
                                        {% endif %}
                                    </div>
                                </div>
                            </div>
                        {% endif %}
                    {% endwith %}

                    <h6>Description</h6>
                    <pre>{{ finding.description }}</pre>

                    <h6>Mitigation</h6>
                    <pre>{{ finding.mitigation }}</pre>
                    {% if finding.get_report_requests %}
                        <h5>Sample Request(s): Displaying {{finding.get_report_requests.count}} of {{finding.burprawrequestresponse_set.count}}</h5>
                        {% for req in finding.get_report_requests %}
                           <h6>Request {{forloop.counter}} </h6>
                           <pre>{{ req.get_request }}</pre>
                        {% if req.get_response %}
                           <h6>Response {{forloop.counter}}</h6>
                           <pre>{{ req.get_response|truncatechars:800 }}</pre>
                        {% endif %}
                        {% endfor %}
                        {% endif %}

                    <h6>Impact</h6>
                    <pre>{{ finding.impact }}</pre>
                    <h6>References</h6>
                    <pre>{{ finding.references }}</pre>
                    {% if include_finding_images %}
                        <h6>Images</h6>
                        {% if finding.images.all.count > 0 %}
                            {% for pic in finding.images.all %}
                                <p><img src="{{ host }}{% pic_token pic 'original' %}" style="max-width: 85%"></p>
                            {% endfor %}
                        {% else %}
                            <p class="text-center">No images found.</p>
                        {% endif %}
                    {% endif %}
                    {% if include_finding_notes %}
                        {% with notes=finding.notes.all|get_public_notes %}
                            {% if notes.count > 0 %}
                                <h6>Notes</h6>
                                <table id="notes" class="tablesorter-bootstrap table table-condensed table-striped">
                                    <thead>
                                        <tr>
                                            <th>User</th>
                                            <th>Date</th>
                                            <th>Note</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        {% for note in notes reversed %}
                                            <tr>
                                                <td>
                                                    {{ note.author.username }}
                                                </td>
                                                <td>
                                                    {{ note.date }}
                                                </td>
                                                <td>
                                                    {{ note }}
                                                </td>
                                            </tr>
                                        {% endfor %}
                                    </tbody>
                                </table>
                            {% endif %}
                        {% endwith %}
                    {% endif %}
                {% endfor %}
            </div>
        </div>
        {% if include_table_of_contents %}
			</div>
		{% endif %}
    </div> <!-- /container -->
{% endblock %}
{% block js %}
    <script src="{{ host }}{% static "jquery/dist/jquery.min.js" %}"></script>
    <!-- Flot Charts JavaScript -->
    <script src="{{ host }}{% static "flot/excanvas.min.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.resize.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.time.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.stack.js" %}"></script>
    <script src="{{ host }}{% static "flot-axis/jquery.flot.axislabels.js" %}"></script>
    <script type="text/javascript">
        $(function () {
            open_findings();
            {% if endpoint_opened_per_month %}
                opened_per_month();
            {% endif %}


        });

        function open_findings() {
            var critical = 0;
            var high = 0;
            var medium = 0;
            var low = 0;
            var info = 0;
            var ticks = [
                [0, "Critical"], [1, "High"], [2, "Medium"], [3, "Low"], [4, "Info"]
            ];

            {% for f in findings %}
                {% if f.severity == 'Critical' %}
                    critical += 1;
                {% elif f.severity == 'High' %}
                    high += 1;
                {% elif f.severity == 'Medium' %}
                    medium += 1;
                {% elif f.severity == 'Low' %}
                    low += 1;
                {% elif f.severity == 'Info' %}
                    info += 1;
                {% endif %}
            {% endfor %}

            var d1 = [
                [0, critical],
            ];
            var d2 = [
                [1, high],
            ];
            var d3 = [
                [2, medium],
            ];
            var d4 = [
                [3, low],
            ];
            var d5 = [
                [4, info],
            ];

            var data = [
                {
                    label: "Critical",
                    data: d1,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 1,
                        fillColor: "#d9534f"
                    },
                    color: "#d9534f"
                },
                {
                    label: "High",
                    data: d2,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 2,
                        fillColor: "#f0ad4e"
                    },
                    color: "#f0ad4e"
                },
                {
                    label: "Medium",
                    data: d3,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 3,
                        fillColor: "#f0de28"
                    },
                    color: "#f0de28"
                },
                {
                    label: "Low",
                    data: d4,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 4,
                        fillColor: "#337ab7"
                    },
                    color: "#337ab7"
                },
                {
                    label: "info",
                    data: d5,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 4,
                        fillColor: "#80699B"
                    },
                    color: "#80699B"
                }
            ];

            $.plot("#open_findings", data, {
                series: {
                    stack: true,
                    bars: {
                        show: true,
                        barWidth: .9,
                        'align': "center",
                    },

                },
                grid: {
                    hoverable: false,
                    borderWidth: 1,
                    borderColor: '#e7e7e7',

                },
                tooltip: false,
                legend: {
                    show: false,
                    position: "ne"
                },
                xaxis: {
                    ticks: ticks,
                },

            });
        }
        ;
        {% if endpoint_opened_per_month %}
            function opened_per_month() {
                var critical = [],
                        high = [],
                        medium = [],
                        low = [];

                {% for month in endpoint_opened_per_month|slice:'1:' %}
                    critical.push([{{ month.0 }}, {{ month.2 }}]);
                    high.push([{{ month.0 }}, {{ month.3 }}]);
                    medium.push([{{ month.0 }}, {{ month.4 }}]);
                    low.push([{{ month.0 }}, {{ month.5 }}]);
                {% endfor %}

                var tick_count = critical.length < 7 ? critical.length : 7;
                var options = {
                    xaxis: {
                        mode: "time",
                        timeformat: "%m-%d-%Y",
                        timezone: 'browser'
                    },
                    xaxes: [{
                        ticks: tick_count
                    }],
                    yaxes: [{
                        min: 0
                    }],
                    series: {
                        stack: true,
                        lines: {
                            show: true
                        },
                        points: {
                            show: true
                        }
                    },
                    grid: {
                        hoverable: true,
                        borderWidth: 1,
                        borderColor: '#e7e7e7'

                    },
                    tooltip: true
                };
                var plotObj = $.plot($("#opened_per_month"), [{
                            data: critical,
                            label: " Critical",
                            color: "#d9534f",

                        }, {
                            data: high,
                            label: " High",
                            color: '#f0ad4e',

                        }, {
                            data: medium,
                            label: " Medium",
                            color: '#f0de28',

                        }, {
                            data: low,
                            label: " Low",
                            color: '#337ab7',

                        }],
                        options);
            }
        {%  endif %}

        window.onload = function () {
            var toc = "";
            var level = 3;

            // Handle all elements exclusive of tags
            document.getElementById("contents").innerHTML =
                document.getElementById("contents").innerHTML.replace(
                    /<h([\d])([^<]*)>([^<]+)<\/h([\d])>/gi,
                    function (str, openLevel, id, titleText, closeLevel) {
                        if (openLevel != closeLevel || openLevel > 5) {
                            return str;
                        }

                        if (openLevel > level) {
                            toc += (new Array(openLevel - level + 1)).join("<ul>");
                        } else if (openLevel < level) {
                            toc += (new Array(level - openLevel + 1)).join("</ul>");
                        }

                        level = parseInt(openLevel);
                        
                        var anchor = titleText.trim().replace(/ /g, "_");

                        if (['Info', 'Low', 'Medium', 'High', 'Critical'].indexOf(titleText) >= 0) {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            "<span class=\"label severity severity-" + titleText + "\">" + titleText + "</span></a></li>";
                        }
                        else {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            titleText + "</a></li>";
                        }
                        
                        
                        return "<a style=\"color:black;\" name=\"" + anchor + "\"><h" + openLevel + "" + id + ">"
                            + titleText + "</h" + closeLevel + "></a>";
                    }
                );

                // Handle findings with tags
                document.getElementById("contents").innerHTML =
                document.getElementById("contents").innerHTML.replace(
                    /<h([\d])([^<]*)>([^<]+)<sup>([^<]+)<\/sup>([^<]*)<\/h([\d])>/gi,
                    function (str, openLevel, id, titleText, tags, junk, closeLevel) {
                        if (openLevel != closeLevel || openLevel > 5) {
                            return str;
                        }

                        if (openLevel > level) {
                            toc += (new Array(openLevel - level + 1)).join("<ul>");
                        } else if (openLevel < level) {
                            toc += (new Array(level - openLevel + 1)).join("</ul>");
                        }

                        level = parseInt(openLevel);
                        
                        var anchor = titleText.trim().replace(/ /g, "_");

                        if (['Info', 'Low', 'Medium', 'High', 'Critical'].indexOf(titleText) >= 0) {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            "<span class=\"label severity severity-" + titleText + "\">" + titleText + "</span></a></li>";
                        }
                        else {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            titleText + "<sup>" + tags + "</sup></a></li>";
                        }
                        
                        
                        return "<a style=\"color:black;\" name=\"" + anchor + "\"><h" + openLevel + "" + id + ">"
                            + titleText + "<sup>" + tags + "</sup></h" + closeLevel + "></a>";
                    }
                );
                
            if (level) {
                toc += (new Array(level + 1)).join("</ul>");
            }

            document.getElementById("toc").innerHTML += toc;
        };
    </script>
{% endblock %}