{% extends 'projects/base_project.html' %}
{% load opencve_extras %}

{% block title %}Vulnerabilities - {{ block.super }}{% endblock %}

{% block content_project %}

<div class="row">
    <div class="col-md-12">
        <!-- Filter Form -->
        <div class="box box-info">
            <div class="box-header with-border">
                <h3 class="box-title">Filter CVEs</h3>
            </div>
            <div class="box-body">
                <form method="get">
                    <div class="row">
                        <div class="col-md-2 col-sm-6 form-group">
                            <label for="id_assignee">Assignee:</label>
                            {{ filter_form.assignee }}
                        </div>
                        <div class="col-md-2 col-sm-6 form-group">
                            <label for="id_status">Status:</label>
                            {{ filter_form.status }}
                        </div>
                        <div class="col-md-2 col-sm-6 form-group">
                            <label for="id_view">View:</label>
                            {{ filter_form.view }}
                        </div>
                        <div class="col-md-4 col-sm-12 form-group">
                            <label for="id_query">Query:</label>
                            {{ filter_form.query }}
                            {% if filter_form.query.errors %}
                            <div class="text-danger" style="font-size: 12px;">
                                {% for error in filter_form.query.errors %}
                                    {{ error }}
                                {% endfor %}
                                </div>
                            {% endif %}
                        </div>
                        <div class="col-md-2 col-sm-12 form-group">
                            <label>&nbsp;</label>
                            <div style="display: flex; gap: 8px;">
                                <button type="submit" class="btn btn-primary" style="flex: 1;">Filter</button>
                                <a href="{% url 'project_vulnerabilities' org_name=request.current_organization.name project_name=project.name %}" class="btn btn-default" style="flex: 1;">Clear</a>
                            </div>
                        </div>
                    </div>
                </form>
            </div>
        </div>

        {% if cves %}
        <div class="box box-primary">
            <div class="box-header with-border">
                <h3 class="box-title">Vulnerabilities <small>({{ page_obj.paginator.count }} CVEs)</small></h3>
                <div class="box-tools pull-right">
                    <a href="{% url 'project_vulnerabilities_export_csv' org_name=request.current_organization.name project_name=project.name %}{% if request.GET %}?{{ request.GET.urlencode }}{% endif %}" class="btn btn-default btn-xs"><i class="fa fa-download"></i> Export CSV</a>
                </div>
            </div>
            <div class="box-body table-responsive no-padding">
                <table class="table" id="cves-tracking-list">
                    <thead>
                        <th>CVE</th>
                        <th>Vendors</th>
                        <th>Products</th>
                        <th class="text-center">Updated</th>
                        <th class="text-center">CVSS v3.1</th>
                        <th class="text-center">Assignee</th>
                        <th class="text-center">Status</th>
                    </thead>
                    {% for cve in cves %}
                    {% with tracker=cve.project_trackers.0 %}
                    <tr class="cve-header">
                        <td class="col-md-2">
                            <a href="{% url 'cve' cve_id=cve.cve_id %}">{{ cve.cve_id }}</a>
                        </td>
                        <td class="col-md-2">{{ cve.vendors|vendors_excerpt }}</td>
                        <td class="col-md-2">{{ cve.vendors|products_excerpt }}</td>
                        <td class="col-md-1 text-center">{{ cve.updated_at|date:"Y-m-d" }}</td>
                        {% if cve.cvssV3_1 %}
                        <td class="col-md-1 text-center">
                            <span class="label label-{{ cve.cvssV3_1.score|cvss_level }}">{{ cve.cvssV3_1.score }} {{ cve.cvssV3_1.score|cvss_human_score|title }}</span>
                        </td>
                        {% else %}
                        <td class="col-md-1 text-center">
                            <span class="label label-default">N/A</span>
                        </td>
                        {% endif %}

                        <!-- Assignee Column -->
                        <td class="col-md-1 text-center">
                            {% include "cves/includes/assignee_badge.html" with cve_id=cve.cve_id project=project project_name=project.name org_name=request.current_organization.name %}
                        </td>

                        <!-- Status Column -->
                        <td class="col-md-1 text-center">
                            {% include "cves/includes/status_badge.html" with cve_id=cve.cve_id project=project project_name=project.name org_name=request.current_organization.name %}
                        </td>
                    </tr>
                    <tr class="cve-summary">
                        <td class="col-md-12 no-bordered" colspan="7">{{ cve.description }}</td>
                    </tr>
                    {% endwith %}
                    {% endfor %}
                </table>

                <div class="center">
                    <div class="pagination">
                        <span class="step-links">
                            {% if page_obj.has_previous %}
                                <a href="{% url 'project_vulnerabilities' org_name=request.current_organization.name project_name=project.name %}?{% query_params_url 'page' 1 %}">&laquo; first</a>
                                <a href="{% url 'project_vulnerabilities' org_name=request.current_organization.name project_name=project.name %}?{% query_params_url 'page' page_obj.previous_page_number %}">previous</a>
                            {% endif %}

                            <span class="current">
                                Page {{ page_obj.number }} of {{ page_obj.paginator.num_pages }}.
                            </span>

                            {% if page_obj.has_next %}
                                <a href="{% url 'project_vulnerabilities' org_name=request.current_organization.name project_name=project.name %}?{% query_params_url 'page' page_obj.next_page_number %}">next</a>
                                <a href="{% url 'project_vulnerabilities' org_name=request.current_organization.name project_name=project.name %}?{% query_params_url 'page' page_obj.paginator.num_pages %}">last &raquo;</a>
                            {% endif %}
                        </span>
                    </div>
                </div>
            </div>
        </div>
        {% else %}
        <p class="alert alert-info">No CVE found.</p>
        {% endif %}
    </div>
</div>

<script>
window.cveTrackingData = {
    organizationMembers: [
        {% for member in organization_members %}
        {
            id: "{{ member.id }}",
            username: "{{ member.username|escapejs }}",
            email: "{{ member.email|escapejs }}"
        }{% if not forloop.last %},{% endif %}
        {% endfor %}
    ],
    assignableMembersByProject: {
        "{{ project.name|escapejs }}": [
            {% for member in organization_members %}
            {
                id: "{{ member.id }}",
                username: "{{ member.username|escapejs }}",
                email: "{{ member.email|escapejs }}"
            }{% if not forloop.last %},{% endif %}
            {% endfor %}
        ]
    },
    statusChoices: [
        {% for status_key, status_label in status_choices %}
        {
            key: "{{ status_key|escapejs }}",
            label: "{{ status_label|escapejs }}"
        }{% if not forloop.last %},{% endif %}
        {% endfor %}
    ],
    views: [
        {% for view in views_data %}
        {
            id: "{{ view.id|escapejs }}",
            name: "{{ view.name|escapejs }}",
            query: "{{ view.query|escapejs }}"
        }{% if not forloop.last %},{% endif %}
        {% endfor %}
    ]
};
</script>


{% endblock %}