privalint 0.1.1 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.de.md +117 -0
- package/README.md +55 -1
- package/dist/assessment.d.ts +6 -0
- package/dist/assessment.js +79 -0
- package/dist/assessment.js.map +1 -0
- package/dist/capture.d.ts +5 -0
- package/dist/capture.js +155 -0
- package/dist/capture.js.map +1 -0
- package/dist/cli.js +12 -3
- package/dist/cli.js.map +1 -1
- package/dist/consent.d.ts +3 -0
- package/dist/consent.js +13 -6
- package/dist/consent.js.map +1 -1
- package/dist/diagnostics.d.ts +27 -0
- package/dist/diagnostics.js +187 -0
- package/dist/diagnostics.js.map +1 -0
- package/dist/i18n.d.ts +5 -0
- package/dist/i18n.js +3 -0
- package/dist/i18n.js.map +1 -0
- package/dist/index.d.ts +5 -0
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/legal.d.ts +10 -0
- package/dist/legal.js +99 -0
- package/dist/legal.js.map +1 -0
- package/dist/network.d.ts +67 -0
- package/dist/network.js +235 -0
- package/dist/network.js.map +1 -0
- package/dist/observations.d.ts +3 -0
- package/dist/observations.js +4 -0
- package/dist/observations.js.map +1 -0
- package/dist/reporters/capture.d.ts +5 -0
- package/dist/reporters/capture.js +35 -0
- package/dist/reporters/capture.js.map +1 -0
- package/dist/reporters/markdown.js +21 -12
- package/dist/reporters/markdown.js.map +1 -1
- package/dist/reporters/messages.d.ts +21 -0
- package/dist/reporters/messages.js +68 -0
- package/dist/reporters/messages.js.map +1 -0
- package/dist/reporters/sarif.js +31 -1
- package/dist/reporters/sarif.js.map +1 -1
- package/dist/reporters/shared.d.ts +1 -3
- package/dist/reporters/shared.js +0 -17
- package/dist/reporters/shared.js.map +1 -1
- package/dist/reporters/text.js +23 -15
- package/dist/reporters/text.js.map +1 -1
- package/dist/rules/google-fonts.js +28 -10
- package/dist/rules/google-fonts.js.map +1 -1
- package/dist/rules/impressum-link.js +21 -8
- package/dist/rules/impressum-link.js.map +1 -1
- package/dist/rules/links.d.ts +2 -0
- package/dist/rules/links.js +2 -0
- package/dist/rules/links.js.map +1 -1
- package/dist/rules/pre-consent-trackers.js +20 -7
- package/dist/rules/pre-consent-trackers.js.map +1 -1
- package/dist/rules/privacy-policy-link.js +12 -5
- package/dist/rules/privacy-policy-link.js.map +1 -1
- package/dist/rules/reject-option.js +28 -8
- package/dist/rules/reject-option.js.map +1 -1
- package/dist/rules/third-party-cdns.js +10 -3
- package/dist/rules/third-party-cdns.js.map +1 -1
- package/dist/rules/third-party-embeds.js +10 -3
- package/dist/rules/third-party-embeds.js.map +1 -1
- package/dist/rules/third-party-hits.js +2 -1
- package/dist/rules/third-party-hits.js.map +1 -1
- package/dist/rules/tracker-hits.d.ts +4 -2
- package/dist/rules/tracker-hits.js +16 -4
- package/dist/rules/tracker-hits.js.map +1 -1
- package/dist/rules/trackers-after-reject.js +24 -12
- package/dist/rules/trackers-after-reject.js.map +1 -1
- package/dist/scan-options.d.ts +39 -0
- package/dist/scan-options.js +2 -0
- package/dist/scan-options.js.map +1 -0
- package/dist/scanner.d.ts +4 -32
- package/dist/scanner.js +87 -104
- package/dist/scanner.js.map +1 -1
- package/dist/types.d.ts +70 -0
- package/package.json +11 -6
package/dist/network.js
ADDED
|
@@ -0,0 +1,235 @@
|
|
|
1
|
+
import { classifyLoadError } from './diagnostics.js';
|
|
2
|
+
export const NETWORK_DEFAULTS = {
|
|
3
|
+
concurrency: 6,
|
|
4
|
+
maxRequests: 500,
|
|
5
|
+
maxResponseBytes: 5 * 1024 * 1024,
|
|
6
|
+
maxTotalBytes: 20 * 1024 * 1024,
|
|
7
|
+
maxRedirects: 10,
|
|
8
|
+
requestTimeoutMs: 10_000,
|
|
9
|
+
};
|
|
10
|
+
export class NetworkError extends Error {
|
|
11
|
+
kind;
|
|
12
|
+
limit;
|
|
13
|
+
constructor(kind, limit) {
|
|
14
|
+
super(kind);
|
|
15
|
+
this.kind = kind;
|
|
16
|
+
this.limit = limit;
|
|
17
|
+
this.name = 'NetworkError';
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
export function networkLimits(options = {}) {
|
|
21
|
+
const limits = { ...NETWORK_DEFAULTS, ...options };
|
|
22
|
+
for (const [key, value] of Object.entries(limits)) {
|
|
23
|
+
const min = key === 'maxRedirects' ? 0 : 1;
|
|
24
|
+
if (!Number.isSafeInteger(value) || value < min)
|
|
25
|
+
throw new RangeError(`${key} must be a safe integer of at least ${min}`);
|
|
26
|
+
}
|
|
27
|
+
return limits;
|
|
28
|
+
}
|
|
29
|
+
function requestBody(request) {
|
|
30
|
+
if (request.postDataEntries !== undefined) {
|
|
31
|
+
if (request.postDataEntries.some((entry) => entry.bytes === undefined)) {
|
|
32
|
+
throw new NetworkError('unsupported-method');
|
|
33
|
+
}
|
|
34
|
+
return Buffer.concat(request.postDataEntries.map((entry) => Buffer.from(entry.bytes ?? '', 'base64')));
|
|
35
|
+
}
|
|
36
|
+
if (request.postData !== undefined)
|
|
37
|
+
return Buffer.from(request.postData);
|
|
38
|
+
if (request.hasPostData)
|
|
39
|
+
throw new NetworkError('unsupported-method');
|
|
40
|
+
return null;
|
|
41
|
+
}
|
|
42
|
+
function failureKind(error, signal, timeout) {
|
|
43
|
+
if (signal.aborted) {
|
|
44
|
+
return signal.reason instanceof DOMException && signal.reason.name === 'TimeoutError'
|
|
45
|
+
? 'timeout'
|
|
46
|
+
: 'aborted';
|
|
47
|
+
}
|
|
48
|
+
if (timeout.aborted)
|
|
49
|
+
return 'timeout';
|
|
50
|
+
return error instanceof NetworkError ? error.kind : classifyLoadError(error);
|
|
51
|
+
}
|
|
52
|
+
/** Chromium Fetch interception includes redirect hops that Playwright route() auto-continues. */
|
|
53
|
+
export class ControlledNetwork {
|
|
54
|
+
adapter;
|
|
55
|
+
limits;
|
|
56
|
+
diagnostics;
|
|
57
|
+
signal;
|
|
58
|
+
queue = [];
|
|
59
|
+
tasks = new Set();
|
|
60
|
+
sessions = new Map();
|
|
61
|
+
active = 0;
|
|
62
|
+
admitted = 0;
|
|
63
|
+
closed = false;
|
|
64
|
+
constructor(adapter, limits, diagnostics, signal) {
|
|
65
|
+
this.adapter = adapter;
|
|
66
|
+
this.limits = limits;
|
|
67
|
+
this.diagnostics = diagnostics;
|
|
68
|
+
this.signal = signal;
|
|
69
|
+
}
|
|
70
|
+
async attach(context) {
|
|
71
|
+
context.on('page', (page) => {
|
|
72
|
+
void this.attachPage(page).catch(() => this.diagnostics.add('browser-failure', page.url()));
|
|
73
|
+
});
|
|
74
|
+
await context.routeWebSocket('**/*', (socket) => {
|
|
75
|
+
this.diagnostics.add('unsupported-protocol', socket.url());
|
|
76
|
+
socket.close();
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
attachPage(page) {
|
|
80
|
+
const existing = this.sessions.get(page);
|
|
81
|
+
if (existing)
|
|
82
|
+
return existing;
|
|
83
|
+
const attaching = this.intercept(page);
|
|
84
|
+
this.sessions.set(page, attaching);
|
|
85
|
+
return attaching;
|
|
86
|
+
}
|
|
87
|
+
async intercept(page) {
|
|
88
|
+
const session = await page.context().newCDPSession(page);
|
|
89
|
+
const redirects = new Map();
|
|
90
|
+
session.on('Fetch.requestPaused', (event) => {
|
|
91
|
+
const count = event.redirectedRequestId
|
|
92
|
+
? (redirects.get(event.redirectedRequestId) ?? 0) + 1
|
|
93
|
+
: 0;
|
|
94
|
+
if (event.redirectedRequestId)
|
|
95
|
+
redirects.delete(event.redirectedRequestId);
|
|
96
|
+
const request = { event, session, redirects: count, redirectCounts: redirects };
|
|
97
|
+
if (this.closed || this.signal.aborted) {
|
|
98
|
+
void this.abort(request, 'aborted');
|
|
99
|
+
return;
|
|
100
|
+
}
|
|
101
|
+
this.admitted++;
|
|
102
|
+
if (this.admitted > this.limits.maxRequests) {
|
|
103
|
+
void this.abort(request, 'resource-limit', 'requests');
|
|
104
|
+
return;
|
|
105
|
+
}
|
|
106
|
+
this.queue.push(request);
|
|
107
|
+
this.pump();
|
|
108
|
+
});
|
|
109
|
+
await session.send('Fetch.enable', {
|
|
110
|
+
patterns: [{ urlPattern: '*', requestStage: 'Request' }],
|
|
111
|
+
});
|
|
112
|
+
}
|
|
113
|
+
pump() {
|
|
114
|
+
while (!this.closed && !this.signal.aborted && this.active < this.limits.concurrency) {
|
|
115
|
+
const request = this.queue.shift();
|
|
116
|
+
if (request === undefined)
|
|
117
|
+
return;
|
|
118
|
+
this.active++;
|
|
119
|
+
const task = this.handle(request).finally(() => {
|
|
120
|
+
this.active--;
|
|
121
|
+
this.tasks.delete(task);
|
|
122
|
+
this.pump();
|
|
123
|
+
});
|
|
124
|
+
this.tasks.add(task);
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
async handle(intercepted) {
|
|
128
|
+
const { event, session, redirects, redirectCounts } = intercepted;
|
|
129
|
+
const { request } = event;
|
|
130
|
+
const controller = new AbortController();
|
|
131
|
+
const timeout = AbortSignal.timeout(this.limits.requestTimeoutMs);
|
|
132
|
+
const signal = AbortSignal.any([this.signal, timeout, controller.signal]);
|
|
133
|
+
try {
|
|
134
|
+
if (!/^https?:$/.test(new URL(request.url).protocol))
|
|
135
|
+
throw new NetworkError('unsupported-protocol');
|
|
136
|
+
if (redirects > this.limits.maxRedirects)
|
|
137
|
+
throw new NetworkError('resource-limit', 'redirects');
|
|
138
|
+
if (this.diagnostics.data.bytes >= this.limits.maxTotalBytes)
|
|
139
|
+
throw new NetworkError('resource-limit', 'total-bytes');
|
|
140
|
+
const response = await withSignal(this.adapter({
|
|
141
|
+
url: request.url,
|
|
142
|
+
method: request.method,
|
|
143
|
+
headers: request.headers,
|
|
144
|
+
body: requestBody(request),
|
|
145
|
+
resourceType: event.resourceType.toLowerCase(),
|
|
146
|
+
signal,
|
|
147
|
+
}), signal);
|
|
148
|
+
const body = await this.readBody(response.body, signal);
|
|
149
|
+
signal.throwIfAborted();
|
|
150
|
+
if (!Number.isInteger(response.status) || response.status < 200 || response.status > 599)
|
|
151
|
+
throw new NetworkError('browser-failure');
|
|
152
|
+
if ([301, 302, 303, 307, 308].includes(response.status))
|
|
153
|
+
redirectCounts.set(event.requestId, redirects);
|
|
154
|
+
await session.send('Fetch.fulfillRequest', {
|
|
155
|
+
requestId: event.requestId,
|
|
156
|
+
responseCode: response.status,
|
|
157
|
+
responseHeaders: Object.entries(response.headers ?? {}).flatMap(([name, value]) => (Array.isArray(value) ? value : [value]).map((item) => ({ name, value: item }))),
|
|
158
|
+
body: body.toString('base64'),
|
|
159
|
+
});
|
|
160
|
+
}
|
|
161
|
+
catch (error) {
|
|
162
|
+
const kind = failureKind(error, this.signal, timeout);
|
|
163
|
+
await this.abort(intercepted, kind, error instanceof NetworkError ? error.limit : undefined);
|
|
164
|
+
}
|
|
165
|
+
finally {
|
|
166
|
+
controller.abort();
|
|
167
|
+
}
|
|
168
|
+
}
|
|
169
|
+
async readBody(body, signal) {
|
|
170
|
+
const chunks = [];
|
|
171
|
+
let size = 0;
|
|
172
|
+
const append = (chunk) => {
|
|
173
|
+
size += chunk.byteLength;
|
|
174
|
+
this.diagnostics.data.bytes += chunk.byteLength;
|
|
175
|
+
if (size > this.limits.maxResponseBytes)
|
|
176
|
+
throw new NetworkError('resource-limit', 'response-bytes');
|
|
177
|
+
if (this.diagnostics.data.bytes > this.limits.maxTotalBytes)
|
|
178
|
+
throw new NetworkError('resource-limit', 'total-bytes');
|
|
179
|
+
chunks.push(chunk);
|
|
180
|
+
};
|
|
181
|
+
if (body === undefined)
|
|
182
|
+
return Buffer.alloc(0);
|
|
183
|
+
if (typeof body === 'string' || body instanceof Uint8Array) {
|
|
184
|
+
append(typeof body === 'string' ? Buffer.from(body) : body);
|
|
185
|
+
}
|
|
186
|
+
else {
|
|
187
|
+
const iterator = body[Symbol.asyncIterator]();
|
|
188
|
+
try {
|
|
189
|
+
while (true) {
|
|
190
|
+
const chunk = await withSignal(iterator.next(), signal);
|
|
191
|
+
if (chunk.done)
|
|
192
|
+
break;
|
|
193
|
+
append(chunk.value);
|
|
194
|
+
}
|
|
195
|
+
}
|
|
196
|
+
finally {
|
|
197
|
+
void iterator.return?.().catch(() => { });
|
|
198
|
+
}
|
|
199
|
+
}
|
|
200
|
+
return Buffer.concat(chunks, size);
|
|
201
|
+
}
|
|
202
|
+
async abort(request, kind, limit) {
|
|
203
|
+
this.diagnostics.failUrl(request.event.request.url, kind, limit);
|
|
204
|
+
await request.session
|
|
205
|
+
.send('Fetch.failRequest', {
|
|
206
|
+
requestId: request.event.requestId,
|
|
207
|
+
errorReason: 'BlockedByClient',
|
|
208
|
+
})
|
|
209
|
+
.catch(() => { });
|
|
210
|
+
}
|
|
211
|
+
async close() {
|
|
212
|
+
this.closed = true;
|
|
213
|
+
await Promise.all(this.queue.splice(0).map((request) => this.abort(request, 'aborted')));
|
|
214
|
+
await Promise.all(this.tasks);
|
|
215
|
+
}
|
|
216
|
+
}
|
|
217
|
+
/** Abort without retaining caller reasons or leaving listeners attached. */
|
|
218
|
+
export async function withSignal(operation, signal) {
|
|
219
|
+
if (signal.aborted) {
|
|
220
|
+
void operation.catch(() => { });
|
|
221
|
+
throw new DOMException('Operation aborted', 'AbortError');
|
|
222
|
+
}
|
|
223
|
+
let onAbort = () => { };
|
|
224
|
+
const aborted = new Promise((_resolve, reject) => {
|
|
225
|
+
onAbort = () => reject(new DOMException('Operation aborted', 'AbortError'));
|
|
226
|
+
signal.addEventListener('abort', onAbort, { once: true });
|
|
227
|
+
});
|
|
228
|
+
try {
|
|
229
|
+
return await Promise.race([operation, aborted]);
|
|
230
|
+
}
|
|
231
|
+
finally {
|
|
232
|
+
signal.removeEventListener('abort', onAbort);
|
|
233
|
+
}
|
|
234
|
+
}
|
|
235
|
+
//# sourceMappingURL=network.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAC;AAiCvE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,GAAG;IAChB,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACjC,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,YAAY,EAAE,EAAE;IAChB,gBAAgB,EAAE,MAAM;CACS,CAAC;AAEpC,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B,IAAI;IACJ,KAAK;IAFhB,YACW,IAA0C,EAC1C,KAA+B;QAExC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAHH,IAAI;qBACJ,KAAK;QAGd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,OAAO,GAAkB,EAAE;IACvD,MAAM,MAAM,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,OAAO,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG;YAC7C,MAAM,IAAI,UAAU,CAAC,GAAG,GAAG,uCAAuC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAsBD,SAAS,WAAW,CAAC,OAAiC;IACpD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAClB,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,WAAW;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAmB,EAAE,OAAoB;IAC5E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,MAAM,YAAY,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc;YACnF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,iGAAiG;AACjG,MAAM,OAAO,iBAAiB;IAST,OAAO;IACP,MAAM;IACN,WAAW;IACX,MAAM;IAXR,KAAK,GAAyB,EAAE,CAAC;IACjC,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,MAAM,GAAG,CAAC,CAAC;IACX,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAuB,EACvB,MAA+B,EAC/B,WAAwB,EACxB,MAAmB;uBAHnB,OAAO;sBACP,MAAM;2BACN,WAAW;sBACX,MAAM;IACtB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,OAAuB;QAClC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAU;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAU;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,OAAO,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB;gBACrC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;gBACrD,CAAC,CAAC,CAAC,CAAC;YACN,IAAI,KAAK,CAAC,mBAAmB;gBAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;YAChF,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC5C,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE;YACjC,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAEO,IAAI;QACV,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACrF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,WAA+B;QAClD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;gBAClD,MAAM,IAAI,YAAY,CAAC,sBAAsB,CAAC,CAAC;YACjD,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY;gBACtC,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;gBAC1D,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,IAAI,CAAC,OAAO,CAAC;gBACX,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE;gBAC9C,MAAM;aACP,CAAC,EACF,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACtF,MAAM,IAAI,YAAY,CAAC,iBAAiB,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACrD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACjD,MAAM,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBACzC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAChF;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAA6B,EAAE,MAAmB;QACvE,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAChD,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBACrC,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;gBACzD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;YAC3D,MAAM,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;oBACxD,IAAI,KAAK,CAAC,IAAI;wBAAE,MAAM;oBACtB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,OAA2B,EAC3B,IAAmB,EACnB,KAA+B;QAE/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,OAAO;aAClB,IAAI,CAAC,mBAAmB,EAAE;YACzB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;YAClC,WAAW,EAAE,iBAAiB;SAC/B,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,SAAqB,EAAE,MAAmB;IAC5E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
/** Legacy records remain valid; failed, pending and HTTP-error responses are not loaded vendors. */
|
|
2
|
+
export const observedRequests = (requests) => requests.filter((request) => request.outcome === undefined ||
|
|
3
|
+
(request.outcome === 'response' && (request.status ?? 200) < 400));
|
|
4
|
+
//# sourceMappingURL=observations.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"observations.js","sourceRoot":"","sources":["../src/observations.ts"],"names":[],"mappings":"AAEA,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAoC,EAAqB,EAAE,CAC1F,QAAQ,CAAC,MAAM,CACb,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,OAAO,KAAK,SAAS;IAC7B,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CACpE,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { ScanResult } from '../types.js';
|
|
2
|
+
export declare function isPartial(result: ScanResult): boolean;
|
|
3
|
+
export declare function coverageMessage(result: ScanResult): string;
|
|
4
|
+
/** Technical observations are reported separately from privacy findings. */
|
|
5
|
+
export declare function captureLines(result: ScanResult): string[];
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
export function isPartial(result) {
|
|
2
|
+
return (result.coverage === 'partial' ||
|
|
3
|
+
result.pages.some((page) => page.error !== undefined ||
|
|
4
|
+
page.capture?.complete === false ||
|
|
5
|
+
(page.status !== null && page.status >= 400)));
|
|
6
|
+
}
|
|
7
|
+
export function coverageMessage(result) {
|
|
8
|
+
return result.lang === 'de'
|
|
9
|
+
? 'Erfassung unvollständig. Keine Befunde bedeutet hier keine vollständige Prüfung; der Ablehnen-Pfad kann ungeprüft sein.'
|
|
10
|
+
: 'Observation incomplete. No findings does not mean a complete check; the reject path may be untested.';
|
|
11
|
+
}
|
|
12
|
+
/** Technical observations are reported separately from privacy findings. */
|
|
13
|
+
export function captureLines(result) {
|
|
14
|
+
const german = result.lang === 'de';
|
|
15
|
+
const lines = [];
|
|
16
|
+
for (const page of result.pages) {
|
|
17
|
+
const data = page.capture?.diagnostics;
|
|
18
|
+
if (data !== undefined) {
|
|
19
|
+
lines.push(`${german ? 'Erfassung' : 'Capture'} ${page.url}: ` +
|
|
20
|
+
`${data.requests} ${german ? 'Anfragen' : 'requests'}, ${data.responses} ${german ? 'Antworten' : 'responses'}, ` +
|
|
21
|
+
`${data.failed} ${german ? 'fehlgeschlagen' : 'failed'} (${data.blocked} ${german ? 'Sicherheitsblockaden' : 'security blocks'}), ` +
|
|
22
|
+
`${data.httpErrors} HTTP ${german ? 'Fehlerantworten' : 'errors'}.`);
|
|
23
|
+
for (const issue of data.issues) {
|
|
24
|
+
lines.push(` ${issue.phase}: ${issue.kind}${issue.limit ? ` (${issue.limit})` : ''}${issue.status ? ` HTTP ${issue.status}` : ''} ${issue.url}`);
|
|
25
|
+
}
|
|
26
|
+
if (data.dropped)
|
|
27
|
+
lines.push(` ${data.dropped} ${german ? 'weitere Diagnosen nicht gespeichert' : 'additional issue details omitted'}.`);
|
|
28
|
+
}
|
|
29
|
+
for (const evaluation of page.ruleEvaluations ?? []) {
|
|
30
|
+
lines.push(` ${evaluation.ruleId}: ${evaluation.status}${evaluation.reason ? ` (${evaluation.reason})` : ''}${evaluation.partial ? ' [partial]' : ''}`);
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
return lines;
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=capture.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../src/reporters/capture.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,SAAS,CAAC,MAAkB;IAC1C,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,OAAO,EAAE,QAAQ,KAAK,KAAK;YAChC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAC/C,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAkB;IAChD,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI;QACzB,CAAC,CAAC,yHAAyH;QAC3H,CAAC,CAAC,sGAAsG,CAAC;AAC7G,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI;gBACjD,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,IAAI;gBACjH,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,KAAK;gBACnI,GAAG,IAAI,CAAC,UAAU,SAAS,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,GAAG,CACtE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,GAAG,EAAE,CACtI,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,OAAO;gBACd,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,kCAAkC,GAAG,CAC5G,CAAC;QACN,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CACR,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7I,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -1,4 +1,6 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { captureLines, coverageMessage, isPartial } from './capture.js';
|
|
2
|
+
import { messagesFor } from './messages.js';
|
|
3
|
+
import { countBySeverity, groupByPage } from './shared.js';
|
|
2
4
|
const ICONS = { error: '🔴', warning: '🟡', info: '🔵' };
|
|
3
5
|
/**
|
|
4
6
|
* Compact report for GitHub job summaries and PR comments.
|
|
@@ -8,38 +10,45 @@ const ICONS = { error: '🔴', warning: '🟡', info: '🔵' };
|
|
|
8
10
|
* rendered inside code spans.
|
|
9
11
|
*/
|
|
10
12
|
export function formatMarkdown(result) {
|
|
13
|
+
const m = messagesFor(result.lang);
|
|
11
14
|
const counts = countBySeverity(result.findings);
|
|
12
15
|
const lines = [
|
|
13
16
|
`### privalint: ${code(result.siteUrl)}`,
|
|
14
17
|
'',
|
|
15
|
-
`${
|
|
18
|
+
`${m.errors(counts.error)} · ${m.warnings(counts.warning)} · ${m.scanned(m.pages(result.pages.length))}`,
|
|
16
19
|
];
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
+
if (result.consent !== undefined) {
|
|
21
|
+
lines.push('', escapeText(m.consent(result.consent)));
|
|
22
|
+
}
|
|
23
|
+
if (isPartial(result))
|
|
24
|
+
lines.push('', escapeText(coverageMessage(result)));
|
|
25
|
+
const observations = captureLines(result);
|
|
26
|
+
if (observations.length > 0) {
|
|
27
|
+
lines.push('', ...observations.map((line) => `- ${escapeText(line)}`));
|
|
20
28
|
}
|
|
21
29
|
for (const [pageUrl, findings] of groupByPage(result.findings)) {
|
|
22
|
-
lines.push('', `#### ${code(pageUrl)}`, '',
|
|
30
|
+
lines.push('', `#### ${code(pageUrl)}`, '', `| | ${m.rule} | ${m.finding} |`, '|---|---|---|');
|
|
23
31
|
for (const finding of findings) {
|
|
24
32
|
lines.push(`| ${ICONS[finding.severity]} | \`${finding.ruleId}\` | ${escapeText(finding.message)} |`);
|
|
25
33
|
}
|
|
26
34
|
}
|
|
27
35
|
const failed = result.pages.filter((page) => page.error !== undefined);
|
|
28
36
|
if (failed.length > 0) {
|
|
29
|
-
lines.push('',
|
|
37
|
+
lines.push('', m.couldNotScan(failed.length), '');
|
|
30
38
|
for (const page of failed) {
|
|
31
39
|
lines.push(`- ${code(page.url)}: ${escapeText(page.error ?? '')}`);
|
|
32
40
|
}
|
|
33
41
|
}
|
|
34
|
-
const fixes = new Map(result.findings.filter((f) => f.fix !== undefined).map((f) => [f.ruleId, f
|
|
42
|
+
const fixes = new Map(result.findings.filter((f) => f.fix !== undefined).map((f) => [f.ruleId, f]));
|
|
35
43
|
if (fixes.size > 0) {
|
|
36
|
-
lines.push('',
|
|
37
|
-
for (const [ruleId, fix] of fixes) {
|
|
38
|
-
|
|
44
|
+
lines.push('', `<details><summary>${m.howToFix}</summary>`, '');
|
|
45
|
+
for (const [ruleId, { fix, references }] of fixes) {
|
|
46
|
+
const legal = references?.length ? ` (${m.legalBasis} ${references.join('; ')})` : '';
|
|
47
|
+
lines.push(`- **${ruleId}**: ${escapeText(`${fix ?? ''}${legal}`)}`);
|
|
39
48
|
}
|
|
40
49
|
lines.push('', '</details>');
|
|
41
50
|
}
|
|
42
|
-
lines.push('',
|
|
51
|
+
lines.push('', `<sub>${m.disclaimer}</sub>`);
|
|
43
52
|
return `${lines.join('\n')}\n`;
|
|
44
53
|
}
|
|
45
54
|
const code = (text) => `\`${text.replaceAll('`', '%60').replaceAll('\n', ' ')}\``;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/reporters/markdown.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/reporters/markdown.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,KAAK,GAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,kBAAkB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACxC,EAAE;QACF,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE;KACzG,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,OAAO,CAAC,MAAM,QAAQ,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAC7E,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC,QAAQ,YAAY,EAAE,EAAE,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,OAAO,UAAU,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU,QAAQ,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;AAE1F,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { Lang } from '../i18n.js';
|
|
2
|
+
import type { ConsentSummary } from '../types.js';
|
|
3
|
+
/** Fixed wording of the text and Markdown reports. */
|
|
4
|
+
export interface ReportMessages {
|
|
5
|
+
errors(count: number): string;
|
|
6
|
+
warnings(count: number): string;
|
|
7
|
+
pages(count: number): string;
|
|
8
|
+
duration(ms: number): string;
|
|
9
|
+
noProblems(pages: string, duration: string): string;
|
|
10
|
+
on: string;
|
|
11
|
+
scanned(pages: string): string;
|
|
12
|
+
couldNotScan(count: number): string;
|
|
13
|
+
fix: string;
|
|
14
|
+
legalBasis: string;
|
|
15
|
+
rule: string;
|
|
16
|
+
finding: string;
|
|
17
|
+
howToFix: string;
|
|
18
|
+
disclaimer: string;
|
|
19
|
+
consent(consent: ConsentSummary): string;
|
|
20
|
+
}
|
|
21
|
+
export declare const messagesFor: (lang: Lang) => ReportMessages;
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
const count = (n, one, many) => `${n} ${n === 1 ? one : many}`;
|
|
2
|
+
const en = {
|
|
3
|
+
errors: (n) => count(n, 'error', 'errors'),
|
|
4
|
+
warnings: (n) => count(n, 'warning', 'warnings'),
|
|
5
|
+
pages: (n) => count(n, 'page', 'pages'),
|
|
6
|
+
duration: (ms) => `${(ms / 1000).toFixed(1)}s`,
|
|
7
|
+
noProblems: (pages, duration) => `No problems found on ${pages} (${duration}).`,
|
|
8
|
+
on: 'on',
|
|
9
|
+
scanned: (pages) => `${pages} scanned`,
|
|
10
|
+
couldNotScan: (n) => `Could not scan ${count(n, 'page', 'pages')}:`,
|
|
11
|
+
fix: 'fix:',
|
|
12
|
+
legalBasis: 'legal basis:',
|
|
13
|
+
rule: 'Rule',
|
|
14
|
+
finding: 'Finding',
|
|
15
|
+
howToFix: 'How to fix',
|
|
16
|
+
disclaimer: 'Automated checks only. A clean result is not proof of GDPR compliance.',
|
|
17
|
+
consent(consent) {
|
|
18
|
+
if (consent.state === 'interaction-failed') {
|
|
19
|
+
return `Consent check: interaction failed (${consent.error ?? 'browser-failure'}); reject path untested`;
|
|
20
|
+
}
|
|
21
|
+
if (!consent.bannerFound) {
|
|
22
|
+
return 'Consent banner: none detected; reject path untested (not a privacy finding)';
|
|
23
|
+
}
|
|
24
|
+
const vendor = consent.cmp === undefined ? '' : ` (${consent.cmp})`;
|
|
25
|
+
if (consent.error !== undefined) {
|
|
26
|
+
return `Consent banner${vendor}: found, but rejecting failed: ${consent.error}`;
|
|
27
|
+
}
|
|
28
|
+
if (consent.rejected) {
|
|
29
|
+
return `Consent banner${vendor}: clicked "${consent.rejectLabel}" and reloaded${consent.afterRejectComplete === false ? '; observation incomplete' : ''}`;
|
|
30
|
+
}
|
|
31
|
+
return `Consent banner${vendor}: found, no supported reject option; reject path untested`;
|
|
32
|
+
},
|
|
33
|
+
};
|
|
34
|
+
const de = {
|
|
35
|
+
errors: (n) => count(n, 'Fehler', 'Fehler'),
|
|
36
|
+
warnings: (n) => count(n, 'Warnung', 'Warnungen'),
|
|
37
|
+
pages: (n) => count(n, 'Seite', 'Seiten'),
|
|
38
|
+
duration: (ms) => `${(ms / 1000).toFixed(1).replace('.', ',')} s`,
|
|
39
|
+
noProblems: (pages, duration) => `Keine Probleme auf ${pages} gefunden (${duration}).`,
|
|
40
|
+
on: 'auf',
|
|
41
|
+
scanned: (pages) => `${pages} geprüft`,
|
|
42
|
+
couldNotScan: (n) => `${count(n, 'Seite', 'Seiten')} ${n === 1 ? 'konnte' : 'konnten'} nicht geprüft werden:`,
|
|
43
|
+
fix: 'Lösung:',
|
|
44
|
+
legalBasis: 'Rechtsgrundlage:',
|
|
45
|
+
rule: 'Regel',
|
|
46
|
+
finding: 'Befund',
|
|
47
|
+
howToFix: 'So beheben Sie es',
|
|
48
|
+
disclaimer: 'Nur automatisierte Prüfungen. Ein sauberes Ergebnis ist kein Nachweis der DSGVO-Konformität.',
|
|
49
|
+
consent(consent) {
|
|
50
|
+
if (consent.state === 'interaction-failed') {
|
|
51
|
+
return `Consent-Prüfung: Interaktion fehlgeschlagen (${consent.error ?? 'browser-failure'}); Ablehnen-Pfad ungeprüft`;
|
|
52
|
+
}
|
|
53
|
+
if (!consent.bannerFound) {
|
|
54
|
+
return 'Cookie-Banner: keines erkannt; Ablehnen-Pfad ungeprüft (kein Datenschutzbefund)';
|
|
55
|
+
}
|
|
56
|
+
const vendor = consent.cmp === undefined ? '' : ` (${consent.cmp})`;
|
|
57
|
+
if (consent.error !== undefined) {
|
|
58
|
+
return `Cookie-Banner${vendor}: gefunden, aber Ablehnen ist fehlgeschlagen: ${consent.error}`;
|
|
59
|
+
}
|
|
60
|
+
if (consent.rejected) {
|
|
61
|
+
return `Cookie-Banner${vendor}: „${consent.rejectLabel}“ geklickt und neu geladen${consent.afterRejectComplete === false ? '; Erfassung unvollständig' : ''}`;
|
|
62
|
+
}
|
|
63
|
+
return `Cookie-Banner${vendor}: gefunden, keine unterstützte Ablehnen-Möglichkeit; Ablehnen-Pfad ungeprüft`;
|
|
64
|
+
},
|
|
65
|
+
};
|
|
66
|
+
const MESSAGES = { en, de };
|
|
67
|
+
export const messagesFor = (lang) => MESSAGES[lang];
|
|
68
|
+
//# sourceMappingURL=messages.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/reporters/messages.ts"],"names":[],"mappings":"AAsBA,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAEvF,MAAM,EAAE,GAAmB;IACzB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC;IACvC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;IAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,wBAAwB,KAAK,KAAK,QAAQ,IAAI;IAC/E,EAAE,EAAE,IAAI;IACR,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU;IACtC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG;IACnE,GAAG,EAAE,MAAM;IACX,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,wEAAwE;IACpF,OAAO,CAAC,OAAO;QACb,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;YAC3C,OAAO,sCAAsC,OAAO,CAAC,KAAK,IAAI,iBAAiB,yBAAyB,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,6EAA6E,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;QACpE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,iBAAiB,MAAM,kCAAkC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,iBAAiB,MAAM,cAAc,OAAO,CAAC,WAAW,iBAAiB,OAAO,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5J,CAAC;QACD,OAAO,iBAAiB,MAAM,2DAA2D,CAAC;IAC5F,CAAC;CACF,CAAC;AAEF,MAAM,EAAE,GAAmB;IACzB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC;IACzC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI;IACjE,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,sBAAsB,KAAK,cAAc,QAAQ,IAAI;IACtF,EAAE,EAAE,KAAK;IACT,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU;IACtC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAClB,GAAG,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,wBAAwB;IAC1F,GAAG,EAAE,SAAS;IACd,UAAU,EAAE,kBAAkB;IAC9B,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,mBAAmB;IAC7B,UAAU,EACR,8FAA8F;IAChG,OAAO,CAAC,OAAO;QACb,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;YAC3C,OAAO,gDAAgD,OAAO,CAAC,KAAK,IAAI,iBAAiB,4BAA4B,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,iFAAiF,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC;QACpE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,gBAAgB,MAAM,iDAAiD,OAAO,CAAC,KAAK,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,gBAAgB,MAAM,MAAM,OAAO,CAAC,WAAW,6BAA6B,OAAO,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChK,CAAC;QACD,OAAO,gBAAgB,MAAM,8EAA8E,CAAC;IAC9G,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAAiC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAE1D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAU,EAAkB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC"}
|
package/dist/reporters/sarif.js
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { createHash } from 'node:crypto';
|
|
2
2
|
import { REPOSITORY_URL, ruleDocsUrl, VERSION } from '../meta.js';
|
|
3
|
+
import { coverageMessage, isPartial } from './capture.js';
|
|
3
4
|
const LEVELS = {
|
|
4
5
|
error: 'error',
|
|
5
6
|
warning: 'warning',
|
|
@@ -39,6 +40,29 @@ export function formatSarif(result) {
|
|
|
39
40
|
},
|
|
40
41
|
},
|
|
41
42
|
results: result.findings.map(toResult),
|
|
43
|
+
invocations: [
|
|
44
|
+
{
|
|
45
|
+
executionSuccessful: !isPartial(result),
|
|
46
|
+
toolExecutionNotifications: isPartial(result)
|
|
47
|
+
? [
|
|
48
|
+
{
|
|
49
|
+
descriptor: { id: 'incomplete-observation' },
|
|
50
|
+
level: 'warning',
|
|
51
|
+
message: { text: coverageMessage(result) },
|
|
52
|
+
},
|
|
53
|
+
]
|
|
54
|
+
: [],
|
|
55
|
+
},
|
|
56
|
+
],
|
|
57
|
+
properties: {
|
|
58
|
+
coverage: result.coverage,
|
|
59
|
+
observations: result.pages.map(({ url, capture, ruleEvaluations }) => ({
|
|
60
|
+
url,
|
|
61
|
+
capture,
|
|
62
|
+
ruleEvaluations,
|
|
63
|
+
})),
|
|
64
|
+
consent: result.consent,
|
|
65
|
+
},
|
|
42
66
|
},
|
|
43
67
|
],
|
|
44
68
|
};
|
|
@@ -50,7 +74,13 @@ function toResult(finding) {
|
|
|
50
74
|
ruleId: finding.ruleId,
|
|
51
75
|
level: LEVELS[finding.severity],
|
|
52
76
|
message: {
|
|
53
|
-
text: [
|
|
77
|
+
text: [
|
|
78
|
+
finding.message,
|
|
79
|
+
`Page: ${finding.pageUrl}`,
|
|
80
|
+
evidence,
|
|
81
|
+
finding.fix,
|
|
82
|
+
finding.references?.join('; '),
|
|
83
|
+
]
|
|
54
84
|
.filter(Boolean)
|
|
55
85
|
.join('\n\n'),
|
|
56
86
|
},
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/reporters/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/reporters/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,MAAM,GAAmD;IAC7D,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,WAAW;wBACjB,eAAe,EAAE,OAAO;wBACxB,cAAc,EAAE,cAAc;wBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACjC,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,IAAI,EAAE,IAAI,CAAC,EAAE;4BACb,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;4BACtC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;4BAC3C,IAAI,EAAE;gCACJ,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,mBAAmB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gCACxE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,uBAAuB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;6BACjF;4BACD,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;yBAC7D,CAAC,CAAC;qBACJ;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACtC,WAAW,EAAE;oBACX;wBACE,mBAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;wBACvC,0BAA0B,EAAE,SAAS,CAAC,MAAM,CAAC;4BAC3C,CAAC,CAAC;gCACE;oCACE,UAAU,EAAE,EAAE,EAAE,EAAE,wBAAwB,EAAE;oCAC5C,KAAK,EAAE,SAAS;oCAChB,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE;iCAC3C;6BACF;4BACH,CAAC,CAAC,EAAE;qBACP;iBACF;gBACD,UAAU,EAAE;oBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC;wBACrE,GAAG;wBACH,OAAO;wBACP,eAAe;qBAChB,CAAC,CAAC;oBACH,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB;aACF;SACF;KACF,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/B,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,OAAO,CAAC,OAAO;gBACf,SAAS,OAAO,CAAC,OAAO,EAAE;gBAC1B,QAAQ;gBACR,OAAO,CAAC,GAAG;gBACX,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC;aAC/B;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,MAAM,CAAC;SAChB;QACD,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;oBACtD,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;iBACzB;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,uBAAuB,EAAE,UAAU,CAAC,QAAQ,CAAC;iBAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;iBACzE,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAChB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChF,OAAO,aAAa,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC"}
|
|
@@ -1,5 +1,3 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { Finding, Severity } from '../types.js';
|
|
2
2
|
export declare function groupByPage(findings: readonly Finding[]): Map<string, Finding[]>;
|
|
3
3
|
export declare function countBySeverity(findings: readonly Finding[]): Record<Severity, number>;
|
|
4
|
-
export declare function describeConsent(consent: ConsentSummary | undefined): string | undefined;
|
|
5
|
-
export declare const plural: (count: number, word: string) => string;
|
package/dist/reporters/shared.js
CHANGED
|
@@ -14,21 +14,4 @@ export function countBySeverity(findings) {
|
|
|
14
14
|
}
|
|
15
15
|
return counts;
|
|
16
16
|
}
|
|
17
|
-
export function describeConsent(consent) {
|
|
18
|
-
if (consent === undefined) {
|
|
19
|
-
return undefined;
|
|
20
|
-
}
|
|
21
|
-
if (!consent.bannerFound) {
|
|
22
|
-
return 'Consent banner: none found';
|
|
23
|
-
}
|
|
24
|
-
const vendor = consent.cmp === undefined ? '' : ` (${consent.cmp})`;
|
|
25
|
-
if (consent.error !== undefined) {
|
|
26
|
-
return `Consent banner${vendor}: found, but rejecting failed: ${consent.error}`;
|
|
27
|
-
}
|
|
28
|
-
if (consent.rejected) {
|
|
29
|
-
return `Consent banner${vendor}: clicked "${consent.rejectLabel}" and reloaded`;
|
|
30
|
-
}
|
|
31
|
-
return `Consent banner${vendor}: found, no reject button`;
|
|
32
|
-
}
|
|
33
|
-
export const plural = (count, word) => `${count} ${word}${count === 1 ? '' : 's'}`;
|
|
34
17
|
//# sourceMappingURL=shared.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/reporters/shared.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CAAC,QAA4B;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA4B;IAC1D,MAAM,MAAM,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC
|
|
1
|
+
{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/reporters/shared.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CAAC,QAA4B;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAA4B;IAC1D,MAAM,MAAM,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|