{% extends "base.html" %}
{% load navigation_tags %}
{% load display_tags %}
{% load get_system_setting %}
{% load static from staticfiles %}
{% block content %}
    <div class="row">
        <div class="col-md-12">
            <div class="panel panel-default">
                <div class="panel-heading tight">
                    <h3 class="has-filters">
                        {{ filter_name }} Findings
                        <div class="dropdown pull-right"></div>
                    </h3>
                </div>
                <div id="the-filters" class="panel-body collapse">
                    {% include "dojo/filter_snippet.html" with form=filtered.form %}
                </div>
            </div>
            {% if findings %}
                <div class="clearfix">
                    {% include "dojo/paging_snippet.html" with page=findings page_size=True %}
                </div>
            <div class="hidden" style="padding-bottom: 5px;" id="bulk_edit_menu">
                <div class="btn-toolbar" role="toolbar" aria-label="Toolbar with button groups">
                  <div class="btn-group mr-2" role="group" aria-label="Second group">
                    <button class="btn btn-sm btn-primary dropdown-toggle" type="button" id="dropdownMenu2"
                            data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
                        Bulk Edit
                        <span class="caret"></span>
                    </button>
                    <ul class="dropdown-menu" aria-labelledby="dropdownMenu1" id="bulk_edit">
                        <li class="dropdown-header">Choose wisely...</li>
                        <li style="padding-left: 8px;">
                          {% if product_tab %}
                            <form action="{% url 'findings_bulk_all_product' product_tab.product.id %}" method="post" id="bulk_change_form">
                          {% else %}
                            <form action="{% url 'findings_bulk_all' %}" method="post" id="bulk_change_form">
                          {% endif %}
                                {% csrf_token %}
                                <label style="display: block" for="severity">Severity</label>
                                <select name="severity" id="severity" style="font-size: 80%">
                                    <option value="">Choose...</option>
                                    <option value="Info">Info</option>
                                    <option value="Low">Low</option>
                                    <option value="Medium">Medium</option>
                                    <option value="High">High</option>
                                    <option value="Critical">Critical</option>
                                </select><br/><br/>
                                <b>Status</b> <input id="id_status" name="status" type="checkbox" alt="Select to enable"/><br/>
                                <label style="font-size: 80%; font-weight: normal; display: block">
                                    <input id="id_active" name="active" type="checkbox" disabled/> <span>Active</span>
                                </label>
                                <label style="font-size: 80%; font-weight: normal; display: block">
                                    <input id="id_verified" name="verified" type="checkbox" disabled/> <span>Verified</span>
                                </label>
                                <label style="font-size: 80%; font-weight: normal; display: block">
                                    <input id="id_false_p" name="false_p" type="checkbox" disabled/> <span>False Positive</span>
                                </label>
                                <label style="font-size: 80%; font-weight: normal; display: block">
                                    <input id="id_out_of_scope" name="out_of_scope" type="checkbox" disabled/>
                                    <span>Out of scope</span>
                                </label>
                                <label style="font-size: 80%; font-weight: normal; display: block">
                                    <input id="id_is_Mitigated" name="is_Mitigated" type="checkbox" disabled/>
                                    <span>Mitigated</span>
                                </label>
                                {% if "enable_jira"|get_system_setting %}
                                <b>Push to JIRA</b> <input id="id_push_tojira" name="push_to_jira" type="checkbox" alt="Select to push to JIRA"/><br/>
                                {% endif %}
                                <label style="display: block">Tags</label>
                                <label style="font-size: 80%; font-weight: normal; display: block; padding-right: 8px;">
                                    <select multiple class="chosen-select" style="display: none;" name="tags" id="tag_choices">
                                        {% for tag in tag_input %}
                                            <option value="{{tag}}">{{tag}}</option>
                                        {% endfor %}`
                                    </select>
                               </label>
                                <input type="submit" class="btn btn-sm btn-primary" value="Submit"/>
                            </form>
                        </li>
                    </ul>
                  </div>
                  <div class="btn-group mr-2" role="group" aria-label="Bulk Actions">
                    {% if product_tab %}
                    <button type="button" class="btn btn-sm  btn-primary" data-toggle="tooltip" data-placement="bottom" title="Merge Findings">
                      <a class="white-color merge" href="#" alt="Merge Findings">
                        <i class="fa fa-compress"></i>
                      </a>
                    </button>
                    {% endif %}
                    <button type="button" class="btn btn-sm  btn-primary" data-toggle="tooltip" data-placement="bottom" title="Delete Findings">
                      <a class="white-color delete-bulk" href="#" alt="Delete Findings">
                        <i class="fa fa-trash"></i>
                      </a>
                    </button>
                  </div>
                </div>
            </div>
                <div class="panel panel-default table-responsive">
                    <table id="open_findings"
                           class="tablesorter-bootstrap table table-condensed table-striped table-hover">
                        <thead>
                        <tr>
                          {% if user.is_staff %}
                          <th class="hidden-sm centered" title="Select all visible findings.">
                              <div class="dropdown">
                                  <button class="btn btn-primary dropdown-toggle" type="button" id="dropdownMenu1"
                                          data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
                                      <form class="inline-form" action="#"><input type="checkbox" name="select_all"
                                                                                  id="select_all"/></form>
                                      <span class="caret"></span>
                                  </button>
                                  <ul class="dropdown-menu" aria-labelledby="dropdownMenu1" id="select_by_severity">
                                      <li><a id="Info">Info</a></li>
                                      <li><a id="Low">Low</a></li>
                                      <li><a id="Medium">Medium</a></li>
                                      <li><a id="High">High</a></li>
                                      <li><a id="Critical">Critical</a></li>
                                      <li role="separator" class="divider"></li>
                                      <li><a id="All">All</a></li>
                                      <li><a id="None">None</a></li>
                                  </ul>
                              </div>
                            </th>
                            <th></th>
                            {% endif %}
                            <th class="nowrap">{% dojo_sort request 'Severity' 'numerical_severity' 'asc' %}</th>
                            <th class="nowrap">{% dojo_sort request 'Name' 'title' %}</th>
                            <th>CWE</th>
                            <th class="nowrap">{% dojo_sort request 'Date' 'date'%}</th>
                            <th class="nowrap">Age</th>
                            {% if 'enable_finding_sla'|fetch_system_setting %}
                            <th>SLA</th>
                            {% endif %}
                            <th>Reporter</th>
                            <th>Found By</th>
                            <th>Status</th>
                            <th></th>
                            {% if "enable_jira"|get_system_setting %}
                              {% if jira_config and product_tab or not product_tab %}
                                <th>JIRA Age</th>
                                <th>JIRA Change</th>
                              {% endif %}
                            {% endif%}
                            {% if show_product_column and product_tab is None %}
                            <th class="nowrap">{% dojo_sort request 'Product' 'test__engagement__product__name'%}</th>
                            {% endif %}
                        </tr>
                        </thead>
                        <tbody>
                        {% for finding in findings %}
                            <tr class="{% if finding.active %}active_finding{% else %}inactive_finding{% endif %}">
                                {% if user.is_staff %}
                                <td class="hidden-sm centered">
                                    <form action="#">
                                        <input type="checkbox" name="select_{{ finding.id }}" id="{{ finding.id }}"
                                               class="select_one {{ finding.severity }}"/>
                                    </form>
                                </td>
                                <td class="nowrap">
                                  <div class="align-top">
                                    <div class="dropdown">
                                      <a href="#" class="dropdown-toggle pull-left" data-toggle="dropdown">&nbsp;<i class="fa fa-ellipsis-v"></i>&nbsp;</a>
                                      <ul class="dropdown-menu" role="menu" aria-labelledby="dropdownMenu1">
                                        <li>
                                          <a class="" href="{% url 'view_finding' finding.id %}">
                                            <i class="fa fa-arrow-circle-right"></i> View
                                          </a>
                                       </li>
                                        <li>
                                          {% if product_tab %}
                                             <a class="" href="{% url 'edit_finding' finding.id %}?source=product_findings{{ request.GET.page|paginator }}">
                                          {% else %}
                                             <a class="" href="{% url 'edit_finding' finding.id %}?source=all_product_findings{{ request.GET.page|paginator }}">
                                          {% endif %}
                                            <i class="fa fa-pencil-square-o"></i> Edit
                                          </a>
                                       </li>
                                       <li class="divider"></li>
                                       <li role="presentation">
                                           <a href="{% url 'manage_images' finding.id %}">
                                               <i class="fa fa-file-image-o"></i> Manage Images
                                           </a>
                                       </li>
                                       {% if finding.under_review and dojo_user in finding.reviewers.all or dojo_user == finding.review_requested_by and finding.under_review %}
                                           <li role="presentation">
                                               <a href="{% url 'clear_finding_review' finding.id %}">
                                                   <i class="icon-user-check"></i> Clear Review
                                               </a>
                                           </li>
                                       {% elif not finding.under_review %}
                                           <li role="presentation">
                                               <a href="{% url 'request_finding_review' finding.id %}">
                                                   <i class="icon-user-check"></i> Request Peer Review
                                               </a>
                                           </li>
                                       {% endif %}

                                       <li role="presentation">
                                           <a href="{% url 'touch_finding' finding.id %}">
                                               <i class="fa fa-clock-o"></i> Touch Finding
                                           </a>
                                       </li>
                                       <li role="presentation">
                                           <a href="{% url 'mktemplate' finding.id %}">
                                               <i class="fa fa-copy"></i> Make Finding a Template
                                           </a>
                                       </li>
                                       <li role="presentation">
                                           <a href="{% url 'find_template_to_apply' finding.id %}">
                                               <i class="fa fa-copy"></i> Apply Template to Finding
                                           </a>
                                       </li>
                                       {% if finding.active %}
                                           <li role="presentation">
                                               <a href="{% url 'close_finding' finding.id %}">
                                                   <i class="fa fa-fire-extinguisher"></i> Close Finding
                                               </a>
                                           </li>
                                       {% else %}
                                           <li role="presentation">
                                               <a href="{% url 'reopen_finding' finding.id %}">
                                                   <i class="fa fa-bug"></i> Open Finding
                                               </a>
                                           </li>
                                       {% endif %}
                                       <li role="presentation">
                                           <a href="{% url 'action_history' finding|content_type finding.id %}">
                                               <i class="fa fa-history"></i> View History
                                           </a>
                                       </li>
                                       <li class="divider"></li>
                                       <li>
                                         <form method="post" action="{% url 'delete_finding' finding.id %}"
                                              style="display: inline" class="form-inline form" id="delete-finding-menu-{{ finding.id }}-form">
                                            {% csrf_token %}
                                            <input type="hidden" name="id" value="{{ finding.id }}"/>
                                         </form>
                                         <a class="text-danger delete-finding" id="delete-finding-menu-{{ finding.id }}" href="#">
                                           <i class="fa fa-trash"></i> Delete
                                         </a>
                                       </li>
                                      </ul>
                                    </div>
                                   </div>
                                </td>
                                {% endif %}
                                <td>
                                  <span class="label severity severity-{{ finding.severity }}">
                                      {{ finding.severity_display }}
                                  </span>
                                </td>
                                <td>
                                  {% if finding.title %}
                                  <a title="{{ finding.title }}"
                                                      href="{% url 'view_finding' finding.id %}">{{ finding.title }}</a>
                                  {% else %}
                                  <a title="{{ finding.id }}"
                                                      href="{% url 'view_finding' finding.id %}">{{ finding.id }}</a>
                                  {% endif %}
                                  {% if finding.file_path %}
                                  <i class="fa dojo-sup fa-code has-popover" data-trigger="hover" data-content="{{ finding.file_path }}" data-placement="right" data-container="body" data-original-title="Files" title="">
                                  {% else %}
                                    {% if finding.endpoints.all %}
                                      <i class="fa dojo-sup fa-sitemap has-popover" data-html="true" data-trigger="hover" data-content="
                                      {% for endpoint in finding.endpoints.all %}
                                        {{ endpoint }}<br/>
                                      {% endfor %}
                                      " data-placement="right" data-container="body" data-original-title="Endpoints" title="">
                                    {% endif %}
                                  {% endif %}
                                  {% if finding.notes.all %}
                                    <i class="fa fa-comment has-popover" data-trigger="hover" data-content="{{ finding.notes.all.0 }}" data-placement="left" data-container="body" data-original-title="Most Recent Note" title="">
                                  {% endif %}
                                  </i>
                                    <sup>
                                        {% for tag in finding.tags %}
                                        <a title="Search {{ tag }}" class="tag-label tag-color" href="{% url 'simple_search' %}?query={{ tag }}">{{ tag }}</a>
                                        {% endfor %}
                                    </sup>
                                </td>
                                <td class="nowrap">
                                {% if finding.cwe > 0 %}
                                  <a target="_blank" href="https://cwe.mitre.org/data/definitions/{{ finding.cwe }}.html">
                                      <i class="fa fa-external-link"></i> {{ finding.cwe }}
                                  </a>
                                {% endif %}
                                </td>
                                <td class="nowrap">{{ finding.date }}</td>
                                <td>{{ finding.age }}</td>
                                {% if 'enable_finding_sla'|fetch_system_setting %}
                                <td>
                                  {{ finding|finding_sla }}
                                </td>
                                {% endif %}
                                <td>
                                  {% if finding.reporter.get_full_name and finding.reporter.get_full_name.strip %}
                                      {{ finding.reporter.get_full_name }}
                                  {% else %}
                                      {{ finding.reporter }}
                                  {% endif %}
                                </td>
                                <td>
                                     {{ finding.get_found_by }}
                                </td>
                                <td>{% if finding.under_review %}Under Review, {% endif %}{{ finding.status }}{% if finding.duplicate_finding.id %}, <a href="{% url 'view_finding' finding.duplicate_finding.id%}" data-toggle="tooltip" data-placement="top" title="{{ finding.duplicate_finding.title }}, {{ finding.duplicate_finding.created }}">Original</a>
                                  {% endif %}
                                </td>
                                <td class="nowrap">
                                  {% if "enable_jira"|get_system_setting %}
                                    {% if finding.jira.jira_key %}
                                      <a href="{{finding.jira_conf.url}}/browse/{{finding.jira.jira_key}}" target="_blank" 
                                           alt="Jira Bug - {{finding.jira.jira_key}}" data-toggle="tooltip" data-placement="bottom" title="{{finding.jira.jira_key}}"><i class="fa fa-bug fa-fw"></i></a>
                                    {% endif %}
                                    {% if finding.notes.count %}
                                      <a href="{% url 'view_finding' finding.id %}#vuln_notes" alt="{{ finding.notes.count }} comment{{ finding.notes.count|pluralize }}">
                                        <span class="glyphicon glyphicon-comment"></span> {{ finding.notes.count }}
                                      </a>
                                    {% endif %}
                                  {% endif %}
                                </td>
                                {% if "enable_jira"|get_system_setting %}
                                  {% if jira_config and product_tab or not product_tab %}
                                      <td class="nowrap">
                                        {% if finding.jira_creation %}
                                          {{ finding.jira_creation|timesince }} 
                                        {% endif %} 
                                      </td>
                                      <td class="nowrap">
                                        {% if finding.jira_change %}
                                          {{ finding.jira_change|timesince }} 
                                        {% endif %}
                                      </td> 
                                  {% endif %}
                                {% endif %}
                                


                                {% if show_product_column and product_tab is None %}
                                <td><a
                                        href="{% url 'view_product' finding.test.engagement.product.id %}"
                                        title="{{ finding.test.engagement.product }}">{{ finding.test.engagement.product }}</a>
                                </td>
                                {% endif %}
                            </tr>
                        {% endfor %}
                        </tbody>
                    </table>
                </div>
                <div class="clearfix pull-right">
                    {% include "dojo/paging_snippet.html" with page=findings page_size=True%}
                </div>
            {% else %}
                <p class="text-center">No findings found.</p>
            {% endif %}
        </div>
    </div>


{% endblock %}
{% block postscript %}
    <script type="application/javascript" src="{% static "chosen/chosen.jquery.min.js" %}"></script>
    <script type="application/javascript">
        $(function () {
          $(".chosen-select").chosen({
            'placeholder_text_multiple': 'Select or add some tags...',
            'no_results_text': "Tag not found, press TAB key to add."
            });

          $(".search-field").find("input").on("keydown", function (evt) {
            var stroke;
            stroke = (_ref = evt.which) != null ? _ref : evt.keyCode;
                if (stroke == 9) { // 9 = tab key
                    var o = new Option($(this).val(), $(this).val(), true, true);
                    $('#tag_choices').append(o);
                    $('#tag_choices').trigger('chosen:updated');
                    $('#tag_choices').focus();
                }
            });
        });
        var checkbox_count = 0;
        function check_checked_finding()
        {
          var checkbox_values = $("input[type=checkbox][name^='select_']");
          for (var i = 0; i < checkbox_values.length; i++) {
            if ($(checkbox_values[i]).prop("checked")) {
              if (checkbox_values[i].name != 'select_all') {
                checkbox_count++;
              }
            }
          }
          if (checkbox_count > 0)
          {
              $('div#bulk_edit_menu').removeClass('hidden');
          }
        }
        $(function () {
            $(document).ready(function(){
              $('[data-toggle="tooltip"]').tooltip();
            });
            check_checked_finding();

            $('#id_status').on('click', function (e) {
                var checked = this.checked;
                $('#bulk_edit_menu #id_active').prop('disabled', !checked);
                $('#bulk_edit_menu #id_verified').prop('disabled', !checked);
                $('#bulk_edit_menu #id_false_p').prop('disabled', !checked);
                $('#bulk_edit_menu #id_out_of_scope').prop('disabled', !checked);
                $('#bulk_edit_menu #id_is_Mitigated').prop('disabled', !checked);
            })
            // Keep the dropdown menu open for selecting severity status
            $('.dropdown-menu').click(function(e) {
                e.stopPropagation();
            });
            //Ensures dropdown has proper zindex
            $('.table-responsive').on('show.bs.dropdown', function () {
              $('.table-responsive').css( "overflow", "inherit" );
            });

            $('.table-responsive').on('hide.bs.dropdown', function () {
              $('.table-responsive').css( "overflow", "auto" );
            })

            $('[id^=delete-finding-menu-]').on('click', function () {
              if (confirm('Are you sure you want to delete these findings?'))
              {
                  var form_element = "form#" + this.id + "-form";
                  $( form_element ).submit();
              }
            });
            $('[data-toggle="tooltip"]').tooltip();

            var availableTags = [
                {% for word in title_words %}
                    "{{word}}",
                {% endfor %}
            ];
            $("#id_title").autocomplete({
                source: availableTags
            });

            $( document ).on( "click", "button.delete-finding", function (e) {
                return confirm('Are you sure you want to delete this finding?')
            });

            $('input[type="checkbox"]').change(function () {
              checkbox_count = 0;
              finding = $(this).attr("name");
              if (finding.indexOf("select_") >= 0)
              {
                var checkbox_values = $("input[type=checkbox][name^='select_']");
                for (var i = 0; i < checkbox_values.length; i++) {
                  if ($(checkbox_values[i]).prop("checked")) {
                    checkbox_count++;
                  }
                }

                if ($(this).prop("checked")) {
                  $('div#bulk_edit_menu').removeClass('hidden');
                } else {
                  checkbox_count--;
                  var checkbox_values = $("input[type=checkbox][name^='select_']");
                  var checked = false;

                  for (var i = 0; i < checkbox_values.length; i++) {
                    if ($(checkbox_values[i]).prop("checked")) {
                      checked = true;
                    }
                  }
                  if (checked == false) {
                    $('div#bulk_edit_menu').addClass('hidden');
                  }
                }

              }
            });
            $('form#bulk_change_form').on('submit', function(e){
                $('input[type=checkbox].select_one:checked').each(function(){
                    var hidden_input = $('<input type="hidden" value="' + this.id + '" name="finding_to_update">')
                    $('form#bulk_change_form').append(hidden_input);
                });
            });

            $('input#select_all').on('click', function (e) {
                if ($(this).is(":checked")) {
                    $('input.select_one').prop('checked', true);
                    console.log($('input.select_one').prop('checked', true));
                    $('div#bulk_edit_menu').removeClass('hidden');
                }
                else {
                    $('input.select_one').prop('checked', false);
                    $('div#bulk_edit_menu').addClass('hidden');
                }
            });

            $('ul#select_by_severity a').on('click', function (e) {
                $('input.select_one').prop('checked', false);
                if ($(this).attr('id') == 'All') {
                    $('input.select_one').prop('checked', true);
                    $('input#select_all').prop('indeterminate', false);
                    $('input#select_all').prop('checked', true);
                }
                else {
                    $('input.' + this.id).prop('checked', true);
                    $('input#select_all').prop('indeterminate', true);
                }

                if ($(this).attr('id') == 'None') {
                    $('div#bulk_edit_menu').addClass('hidden');
                }
                else {
                    $('div#bulk_edit_menu').removeClass('hidden');
                }
            });

            $('a.delete-bulk').on('click', function (e) {
                if (confirm('Are you sure you want to delete this finding?'))
                {
                    var hidden_input = $('<input type="hidden" value="delete_bulk_findings" name="delete_bulk_findings">')
                    $('form#bulk_change_form').append(hidden_input);
                    $( "form#bulk_change_form" ).submit();
                }
            });

            {% if product_tab %}
            $('a.merge').on('click', function (e) {
              if (checkbox_count > 1)
              {
                var hidden_input = $('<input type="hidden" value="merge_findings" name="merge_findings">')
                $("form#bulk_change_form").attr("action", "{% url 'merge_finding_product' product_tab.product.id %}");
                $("form#bulk_change_form").attr("method", "get");
                $('form#bulk_change_form').append(hidden_input);
                $( "form#bulk_change_form" ).submit();
              } else {
                alert("Please select at least two findings before merging.");
              }
            });
            {% endif %}

            $( document ).on( "click", "button.delete-finding", function (e) {
                return confirm('Are you sure you want to delete this finding(s)?')
            });

            $('a#add_notes_link').on('click', function (e) {
                $("html, body").animate({scrollTop: $("#id_entry").offset().top}, 600);
                $("#id_entry").focus();
                $("#test-pulldown").dropdown('toggle')
                return false;
            });

            if (document.referrer.indexOf('simple_search') > 0) {
                var terms = '';
                if ($.cookie('highlight')) {
                    terms = $.cookie('highlight').split(' ');

                    for (var i = 0; i < terms.length; i++) {
                        $('body').highlight(terms[i]);
                    }
                }

                $('input#simple_search').val(terms);
            };

        });

    </script>
    {% include "dojo/filter_js_snippet.html" %}
{% endblock %}