ScanHistoryController.java

////////////////////////////////////////////////////////////////////////
//
//Copyright (c) 2009-2013 Denim Group, Ltd.
//
//The contents of this file are subject to the Mozilla Public License
//Version 2.0 (the "License"); you may not use this file except in
//compliance with the License. You may obtain a copy of the License at
//http://www.mozilla.org/MPL/
//
//Software distributed under the License is distributed on an "AS IS"
//basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
//License for the specific language governing rights and limitations
//under the License.
//
//The Original Code is ThreadFix.
//
//The Initial Developer of the Original Code is Denim Group, Ltd.
//Portions created by Denim Group, Ltd. are Copyright (C)
//Denim Group, Ltd. All Rights Reserved.
//
//Contributor(s): Denim Group, Ltd.
//
////////////////////////////////////////////////////////////////////////
package com.denimgroup.threadfix.webapp.controller;

import java.util.Arrays;
import java.util.List;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.WebDataBinder;
import org.springframework.web.bind.annotation.InitBinder;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;

import com.denimgroup.threadfix.data.entities.ChannelType;
import com.denimgroup.threadfix.data.entities.Scan;
import com.denimgroup.threadfix.service.SanitizedLogger;
import com.denimgroup.threadfix.service.ScanService;
import com.denimgroup.threadfix.webapp.validator.BeanValidator;

@Controller
@RequestMapping("/scans")
public class ScanHistoryController {

	private final SanitizedLogger log = new SanitizedLogger(ScanHistoryController.class);
	// updaated by Michael Xin
	private static final List<String> DYNAMIC_TYPES = Arrays.asList(new String[]{ ChannelType.ACUNETIX_WVS,
			ChannelType.APPSCAN_ENTERPRISE, ChannelType.ARACHNI, ChannelType.BURPSUITE, ChannelType.NESSUS,
			ChannelType.NETSPARKER, ChannelType.NTO_SPIDER, ChannelType.SKIPFISH, ChannelType.W3AF,
			ChannelType.WEBINSPECT, ChannelType.ZAPROXY, ChannelType.QUALYSGUARD_WAS, ChannelType.APPSCAN_DYNAMIC, ChannelType.PRODUCT_SECURITY_TEST, ChannelType.NESSUS_SCAN
	});
	private static final List<String> STATIC_TYPES = Arrays.asList(new String[]{ ChannelType.APPSCAN_SOURCE,
			ChannelType.FINDBUGS, ChannelType.FORTIFY, ChannelType.VERACODE, ChannelType.CAT_NET,
			ChannelType.BRAKEMAN
	});
	private static final List<String> MIXED_TYPES = Arrays.asList(new String[]{ ChannelType.SENTINEL });
	private static final String DYNAMIC="Dynamic", STATIC="Static", MIXED="Mixed";

	private ScanService scanService;

	@Autowired
	public ScanHistoryController(ScanService scanService) {
		this.scanService = scanService;
	}

	public ScanHistoryController(){}

	@InitBinder
	protected void initBinder(WebDataBinder binder) {
		binder.setValidator(new BeanValidator());
	}

	@RequestMapping(method = RequestMethod.GET)
	public ModelAndView viewScans() {
		log.info("Hit scan history page.");

		ModelAndView mav = new ModelAndView("scans/history");
		return mav;
	}
	
	@RequestMapping(value="/table",method = RequestMethod.POST)
	public ModelAndView getScanTable(@RequestBody TableSortBean bean) {

		int page = 0, scanCount = 0, totalPages = 0;
		
		page = bean.getPage();
		scanCount = scanService.getScanCount();
		totalPages = (scanCount / 100) + 1;
		if (scanCount % 100 == 0) {
			totalPages -= 1;
		}
		if (page > totalPages) page = totalPages;
		if (page < 1) page = 1;
		
		List<Scan> scans = scanService.getTableScans(page);
		
		ModelAndView mav = new ModelAndView("scans/historyTable");
		mav.addObject("scanList", scans);
		mav.addObject("scanTypes", getTypes(scans));
		mav.addObject("numPages", totalPages);
		mav.addObject("page", page);
		mav.addObject("numScans", scanCount);
		return mav;
	}
	
	private String[] getTypes(List<Scan> scanList) {
		String[] types = new String[scanList.size()];
		for (int i = 0; i < scanList.size(); i++) {
			Scan scan = scanList.get(i);
			String type = scan.getApplicationChannel().getChannelType().getName();
			if (DYNAMIC_TYPES.contains(type)) {
				types[i] = DYNAMIC;
			} else if (STATIC_TYPES.contains(type)) {
				types[i] = STATIC;
			} else if (MIXED_TYPES.contains(type)) {
				types[i] = MIXED;
			}
		}
		return types;
	}
}