{% extends "report_base.html" %}
{% load static from staticfiles %}
{% load display_tags %}
{% load humanize %}
{% load get_endpoint_status %}
{% load get_note_status %}
{% load event_tags %}
{% block content %}
    <div class="container">
        {% if include_table_of_contents%}
			<div class="row">
				<div class="col-lg-12" id="toc">
					<h3 id="table_of_contents">Table of Contents for {{ product.name }}</h3>
				</div>
			</div>

			<div id="contents">
		{% endif %}
        {% if include_executive_summary %}
            <div class="row">
                <div class="col-lg-12">
                    <h3 id="executive">Executive Summary</h3>
                    <p>
                        This report represents a security audit performed by the {{ team_name }} team.
                        It contains confidential information about the state of your network and applications.
                        Access to this information by unauthorized personnel may allow them to compromise your network.
                    </p>
                    <div class="panel panel-default endpoints table-responsive">
                        <div class="panel-heading">
                            <h4>Vulnerable Services</h4>
                        </div>
                        {% if  endpoints %}
                            {% colgroup endpoints into 2 cols as grouped_items %}
                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                {% for row in grouped_items %}
                                    <tr>
                                        {% for item in row %}
                                            <td>{% if item %}<i class="fa fa-circle"></i> {{ item }}{% endif %}
                                            </td>
                                        {% endfor %}
                                    </tr>
                                {% endfor %}
                            </table>
                        {% else %}
                            <div id="vuln_endpoints" class="panel-body endpoint-panel table-responsive">
                                No endpoints.
                            </div>
                        {% endif %}

                    </div>
                </div>

                <div class="col-md-6">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                            <h5>
                                Endpoint Finding Count
                            </h5>
                        </div>
                        <div class="panel-body">
                            <div id="open_findings" class="graph"></div>
                        </div>
                    </div>
                </div>
                <div class="col-md-6">
                    <div class="panel panel-default">
                        <div class="panel-heading">
                            <h5>
                                Finding Age
                            </h5>
                        </div>
                        <div class="panel-body">
                            <div id="finding_age" class="graph"></div>
                        </div>
                    </div>
                </div>
            </div>
        {% endif %}
        <div class="row">
            <div class="col-lg-12">
                {% if findings %}
                    <h3 id="findings">Findings</h3>
                {% endif %}
                {% for finding in findings %}
                    {% ifchanged finding.severity %}
                        <h4>{{ finding.severity|capfirst }}</h4>
                    {% endifchanged %}
                    <div class="panel panel-default">
                        <div class="panel-heading finding-title">
                            <div class="clearfix">
                                <h5>
                                    Finding {{ finding.id }}: {{ finding.title }}
                                    {% if finding.tags %}
                                        <sup>
                                            {% for tag in finding.tags %}
                                            {{ tag }}
                                            {% endfor %}
                                        </sup>
                                    {% endif %}
                                </h5>
                            </div>
                        </div>
                        <div class="table-responsive">
                            <table id="notes" class="table-striped table table-condensed table-hover centered">
                                <tr>
                                    <th>Severity</th>
                                    <th>Status</th>
                                    {% if finding.risk_acceptance_set.all %}
                                        <th>Acceptance</th>
                                    {% endif %}
                                    <th>Date discovered</th>
                                    <th>Age</th>
                                    <th>Reporter</th>
                                    {% if finding.mitigated %}
                                        <th>Date Mitigated</th>
                                        <th>Mitigated By</th>
                                    {% endif %}
                                    {% if finding.cwe > 0 %}
                                        <th>CWE</th>
                                    {% endif %}
                                </tr>
                                <tr>
                                    <td>
                                    <span class="label severity severity-{{ finding.severity }}">
                                        {% if finding.severity %}
                                            {{ finding.severity }}
                                        {% else %}
                                            Unknown
                                        {% endif %}
                                    </span>
                                    </td>
                                    <td>{{ finding.status }}</td>
                                    {% if finding.risk_acceptance_set.all %}
                                        <td>
                                            <a href="{% url 'view_risk' finding.test.engagement.id finding.risk_acceptance_set.all.0.id %}">
                                                View Risk Acceptance</a>
                                        </td>
                                    {% endif %}
                                    <td>{{ finding.date }}</td>
                                    <td>{{ finding.age }} days</td>
                                    <td>{{ finding.reporter }}</td>
                                    {% if finding.mitigated %}
                                        <td>{{ finding.mitigated }}</td>
                                        <td>{{ finding.mitigated_by }}</td>
                                    {% endif %}
                                    {% if finding.cwe > 0 %}
                                        <td>
                                            <a target="_blank"
                                               href="https://cwe.mitre.org/data/definitions/{{ finding.cwe }}.html">
                                                <i class="fa fa-external-link"></i> {{ finding.cwe }}
                                            </a>
                                        </td>
                                    {% endif %}

                                </tr>
                            </table>
                        </div>
                    </div>
                    
                    {% with endpoints=finding.endpoints.all|get_vulnerable_endpoints %}
                        {% if endpoints %}
                            <div class="row">
                                <div class="col-md-12">
                                    <div class="panel panel-info endpoints table-responsive">
                                        <div class="panel-heading">
                                            {% if finding.file_path %}
                                            <h6> Location </h6>
                                            {%  else %}
                                            <h6>Vulnerable Endpoints / Systems</h6>
                                            {% endif %}
                                        </div>

                                        {% if endpoints %}
                                            {% colgroup endpoints into 2 cols as grouped_items %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                {% for row in grouped_items %}
                                                    <tr>
                                                        {% for item in row %}
                                                            <td>{% if item %}<i class="fa fa-circle"></i>
                                                                {{ item }}{% endif %}
                                                            </td>
                                                        {% endfor %}
                                                    </tr>
                                                {% endfor %}
                                            </table>
                                        {% elif finding.file_path %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                <tr>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        File Path
                                                    </th>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        Line Number
                                                    </th>
                                                </tr>
                                                <tr>
                                                    <td style="padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.file_path }}</td>
                                                    <td style=" text-align:center; padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.line }}</td>
                                                </tr>
                                            </table>
                                        {% else %}
                                            <div id="vuln_endpoints" class="panel-body endpoint-panel table-responsive">
                                                No endpoints.
                                            </div>
                                        {% endif %}
                                    </div>
                                </div>
                            </div>
                        {% endif %}
                    {% endwith %}

                    {% with endpoints=finding.endpoints.all|get_remediated_endpoints %}
                        {% if endpoints %}
                            <div class="row">
                                <div class="col-md-12">
                                    <div class="panel panel-info endpoints table-responsive">
                                        <div class="panel-heading">
                                            {% if finding.file_path %}
                                            <h6> Location </h6>
                                            {%  else %}
                                            <h6>Remediated Endpoints / Systems</h6>
                                            {% endif %}
                                        </div>

                                        {% if endpoints %}
                                            {% colgroup endpoints into 2 cols as grouped_items %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                {% for row in grouped_items %}
                                                    <tr>
                                                        {% for item in row %}
                                                            <td>{% if item %}<i class="fa fa-circle"></i>
                                                                {{ item }}{% endif %}
                                                            </td>
                                                        {% endfor %}
                                                    </tr>
                                                {% endfor %}
                                            </table>
                                        {% elif finding.file_path %}
                                            <table class="table-striped table table table-condensed table-hover finding-endpoints">
                                                <tr>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        File Path
                                                    </th>
                                                    <th style="text-align: center;padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">
                                                        Line Number
                                                    </th>
                                                </tr>
                                                <tr>
                                                    <td style="padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.file_path }}</td>
                                                    <td style=" text-align:center; padding: 4px;vertical-align: top;border: 1px solid #DDDDDD;">{{ finding.line }}</td>
                                                </tr>
                                            </table>
                                        {% else %}
                                            <div id="vuln_endpoints" class="panel-body endpoint-panel table-responsive">
                                                No endpoints.
                                            </div>
                                        {% endif %}
                                    </div>
                                </div>
                            </div>
                        {% endif %}
                    {% endwith %}

                    <h6>Description</h6>
                    <pre>{{ finding.description }}</pre>
                    <h6>Mitigation</h6>
                    <pre>{{ finding.mitigation }}</pre>
                 {% if finding.get_report_requests %}
                        <h5>Sample Request(s): Displaying {{finding.get_report_requests.count}} of {{finding.burprawrequestresponse_set.count}}</h5>
                        {% for req in finding.get_report_requests %}
                           <h6>Request {{forloop.counter}} </h6>
                           <pre>{{ req.get_request }}</pre>
                        {% if req.get_response %}
                           <h6>Response {{forloop.counter}}</h6>
                           <pre>{{ req.get_response|truncatechars:800 }}</pre>
                        {% endif %}
                        {% endfor %}
                        {% endif %}

                    <h6>Impact</h6>
                    <pre>{{ finding.impact }}</pre>
                    <h6>References</h6>
                    <pre>{{ finding.references }}</pre>
                    {% if include_finding_images %}
                        <h6>Images</h6>
                        {% if finding.images.all.count > 0 %}
                            {% for pic in finding.images.all %}
                                <p><img src="{{ host }}{% pic_token pic 'original' %}" style="max-width: 85%"></p>
                            {% endfor %}
                        {% else %}
                            <p class="text-center">No images found.</p>
                        {% endif %}
                    {% endif %}
                    {% if include_finding_notes %}
                        {% with notes=finding.notes.all|get_public_notes %}
                            {% if notes.count > 0 %}
                                <h6>Notes</h6>
                                <table id="notes" class="tablesorter-bootstrap table table-condensed table-striped">
                                    <thead>
                                        <tr>
                                            <th>User</th>
                                            <th>Date</th>
                                            <th>Note</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        {% for note in notes reversed %}
                                            <tr>
                                                <td>
                                                    {{ note.author.username }}
                                                </td>
                                                <td>
                                                    {{ note.date }}
                                                </td>
                                                <td>
                                                    {{ note }}
                                                </td>
                                            </tr>
                                        {% endfor %}
                                    </tbody>
                                </table>
                            {% endif %}
                        {% endwith %}
                    {% endif %}
                {% endfor %}
            </div>
        </div>
        {% if include_table_of_contents %}
			</div>
		{% endif %}
    </div> <!-- /container -->
{% endblock %}
{% block js %}
    <script src="{{ host }}{% static "jquery/dist/jquery.min.js" %}"></script>
    <!-- Flot Charts JavaScript -->
    <script src="{{ host }}{% static "flot/excanvas.min.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.resize.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.time.js" %}"></script>
    <script src="{{ host }}{% static "flot/jquery.flot.stack.js" %}"></script>
    <script src="{{ host }}{% static "flot-axis/jquery.flot.axislabels.js" %}"></script>
    <script type="text/javascript">
        $(function () {
            finding_age();
            open_findings();
        });

        function finding_age() {
            var data = {};
            var data_1 = []
            var ticks = []
            {% for f in findings %}
                if (data[{{ f.age }}]) {
                    data[{{ f.age }}] += 1
                }
                else {
                    data[{{ f.age }}] = 1
                }
            {% endfor %}
            var i = 0;
            $.each(data, function (index, value) {
                if (value > 0) {
                    data_1.push([i, value]);
                    ticks.push([i, index])
                }
                i++;
            });


            var dataset = [
                {data: data_1, color: "#337ab7", fillColor: "#337ab7"}
            ];

            var options = {
                series: {
                    bars: {
                        show: true,
                        fill: true,
                        fillColor: "#337ab7"
                    }
                },
                bars: {
                    align: "center",
                    barWidth: 0.5
                },
                xaxis: {
                    axisLabel: "Days Open",
                    axisLabelUseCanvas: true,
                    axisLabelFontSizePixels: 12,
                    axisLabelFontFamily: 'Verdana, Arial',
                    axisLabelPadding: 10,
                    ticks: ticks,
                },
                yaxis: {
                    axisLabel: "Number of Findings",
                    axisLabelUseCanvas: true,
                    axisLabelFontSizePixels: 12,
                    axisLabelFontFamily: 'Verdana, Arial',
                    axisLabelPadding: 3,
                },
                legend: {
                    show: false,
                },
                grid: {
                    borderWidth: 1,
                    borderColor: '#e7e7e7',
                }
            };


            $.plot("#finding_age", dataset, options);
        }
        ;
        function open_findings() {
            var critical = 0;
            var high = 0;
            var medium = 0;
            var low = 0;
            var info = 0;
            var ticks = [
                [0, "Critical"], [1, "High"], [2, "Medium"], [3, "Low"], [4, "Info"]
            ];

            {% for f in findings %}
                {% if f.severity == 'Critical' %}
                    critical += 1;
                {% elif f.severity == 'High' %}
                    high += 1;
                {% elif f.severity == 'Medium' %}
                    medium += 1;
                {% elif f.severity == 'Low' %}
                    low += 1;
                {% elif f.severity == 'Info' %}
                    info += 1;
                {% endif %}
            {% endfor %}

            var d1 = [
                [0, critical],
            ];
            var d2 = [
                [1, high],
            ];
            var d3 = [
                [2, medium],
            ];
            var d4 = [
                [3, low],
            ];
            var d5 = [
                [4, info],
            ];

            var data = [
                {
                    label: "Critical",
                    data: d1,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 1,
                        fillColor: "#d9534f"
                    },
                    color: "#d9534f"
                },
                {
                    label: "High",
                    data: d2,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 2,
                        fillColor: "#f0ad4e"
                    },
                    color: "#f0ad4e"
                },
                {
                    label: "Medium",
                    data: d3,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 3,
                        fillColor: "#f0de28"
                    },
                    color: "#f0de28"
                },
                {
                    label: "Low",
                    data: d4,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 4,
                        fillColor: "#337ab7"
                    },
                    color: "#337ab7"
                },
                {
                    label: "info",
                    data: d5,
                    bars: {
                        show: true,
                        fill: true,
                        lineWidth: 1,
                        order: 4,
                        fillColor: "#80699B"
                    },
                    color: "#80699B"
                }
            ];

            $.plot("#open_findings", data, {
                series: {
                    stack: true,
                    bars: {
                        show: true,
                        barWidth: .9,
                        'align': "center",
                    },

                },
                grid: {
                    hoverable: false,
                    borderWidth: 1,
                    borderColor: '#e7e7e7',

                },
                tooltip: false,
                legend: {
                    show: false,
                    position: "ne"
                },
                xaxis: {
                    ticks: ticks,
                },

            });
        }
        ;

        window.onload = function () {
            var toc = "";
            var level = 3;

            // Handle all elements exclusive of tags
            document.getElementById("contents").innerHTML =
                document.getElementById("contents").innerHTML.replace(
                    /<h([\d])([^<]*)>([^<]+)<\/h([\d])>/gi,
                    function (str, openLevel, id, titleText, closeLevel) {
                        if (openLevel != closeLevel || openLevel > 5) {
                            return str;
                        }

                        if (openLevel > level) {
                            toc += (new Array(openLevel - level + 1)).join("<ul>");
                        } else if (openLevel < level) {
                            toc += (new Array(level - openLevel + 1)).join("</ul>");
                        }

                        level = parseInt(openLevel);
                        
                        var anchor = titleText.trim().replace(/ /g, "_");

                        if (['Info', 'Low', 'Medium', 'High', 'Critical'].indexOf(titleText) >= 0) {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            "<span class=\"label severity severity-" + titleText + "\">" + titleText + "</span></a></li>";
                        }
                        else {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            titleText + "</a></li>";
                        }
                        
                        
                        return "<a style=\"color:black;\" name=\"" + anchor + "\"><h" + openLevel + "" + id + ">"
                            + titleText + "</h" + closeLevel + "></a>";
                    }
                );

                // Handle findings with tags
                document.getElementById("contents").innerHTML =
                document.getElementById("contents").innerHTML.replace(
                    /<h([\d])([^<]*)>([^<]+)<sup>([^<]+)<\/sup>([^<]*)<\/h([\d])>/gi,
                    function (str, openLevel, id, titleText, tags, junk, closeLevel) {
                        if (openLevel != closeLevel || openLevel > 5) {
                            return str;
                        }

                        if (openLevel > level) {
                            toc += (new Array(openLevel - level + 1)).join("<ul>");
                        } else if (openLevel < level) {
                            toc += (new Array(level - openLevel + 1)).join("</ul>");
                        }

                        level = parseInt(openLevel);
                        
                        var anchor = titleText.trim().replace(/ /g, "_");

                        if (['Info', 'Low', 'Medium', 'High', 'Critical'].indexOf(titleText) >= 0) {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            "<span class=\"label severity severity-" + titleText + "\">" + titleText + "</span></a></li>";
                        }
                        else {
                            toc += "<li><a style=\"font-size:" + (160 - (level * 7)) + "%; color:black;\" href=\"#" + anchor + "\">" + 
                            titleText + "<sup>" + tags + "</sup></a></li>";
                        }
                        
                        
                        return "<a style=\"color:black;\" name=\"" + anchor + "\"><h" + openLevel + "" + id + ">"
                            + titleText + "<sup>" + tags + "</sup></h" + closeLevel + "></a>";
                    }
                );
                
            if (level) {
                toc += (new Array(level + 1)).join("</ul>");
            }

            document.getElementById("toc").innerHTML += toc;
        };

    </script>
{% endblock %}