{% load i18n %}
{% trans "App Security Report" %}
{% trans "For Internal Purpose" %}
{% if data.prepared_for.logo != '' %}{% else %}

{{ data.prepared_for.name }}

{% endif %}
{{ file.name }}
{{ file.project.package_name }}{% if file.project.platform == 0 %}{{file.project.get_platform_display}}{% elif file.project.platform == 1 %}{{file.project.get_platform_display}}{% elif file.project.platform == 2 %}{{file.project.get_platform_display}}{% endif %}
{{ file.version }}
{% if file.fmd.name != '' %}
{{ file.fmd.name }}
{% endif %}
{% if not data.prepared_by.hide and not data.powered_by.hide %}{% elif not data.prepared_by.hide and data.powered_by.hide %}{% elif data.prepared_by.hide and not data.powered_by.hide %}{% endif %}
{% trans "Prepared by" %}
{% if data.prepared_by.logo != '' %}{% else %}

{{ data.prepared_by.name }}

{% endif %}
{% trans "Powered by" %}
{% if data.powered_by.logo != '' %}{% else %}

{{ data.powered_by.name }}

{% endif %}
{% trans "Prepared by" %}
{% if data.prepared_by.logo != '' %}{% else %}

{{ data.prepared_by.name }}

{% endif %}
{% trans "Powered by" %}
{% if data.powered_by.logo != '' %}{% else %}

{{ data.powered_by.name }}

{% endif %}
{% if data.show_copyright %}

{% trans "Portions of this document and the templates used in its production are the property of Appknox" %}{% if data.partner and data.partner.name %}{% trans " and " %}{{ data.partner.name }}{% trans "," %}{% endif %}{% trans " and cannot be copied without permission." %}

{% endif %}

{% trans "While precautions have been taken in the preparation of this document, the publisher and the author(s) assume no responsibility for errors, omissions, or for damages resulting from the use of the information contained herein. Use of " %}{% if data.show_copyright %}{% trans "Appknox" %}{% if data.partner and data.partner.name %}{% trans " and " %}{{ data.partner.name }}{% endif %}{% endif %}{% trans " services does not guarantee the security of a system, or that intrusions will not occur." %}

{% trans "Application Details" %}
{% trans "Application Name" %}{{file.name}} {% if file.fmd.name != '' %}
{{ file.fmd.name }} {% endif %}
{% trans "Platform" %}{{file.project.get_platform_display}}
{% trans "Application Namespace" %}{{file.project.package_name}}
{% trans "Version" %}{{file.version}}
{% trans "Audit Date" %}{{ date }}
{% trans "Application SHA1 Hash" %}{{file.sha1hash}}
{% trans "Application MD5 Hash" %}{{file.md5hash}}

{% trans "Table of Contents" %}

{% for analysis in file.sorted_analyses %} {% if analysis.computed_risk > RiskEnum.PASSED %}{% if analysis.vulnerability.non_compliant %}{% endif %} {% if analysis.vulnerability.compliant %}{% endif %} {% if analysis.vulnerability.business_implication %}{% endif %} {% if analysis.vulnerability.related_to %}{% endif %} {% endif %} {% endfor %}
{% trans "Report Summary" %}
{% trans "Audit Summary" %}
{% if data.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating" %}
{{ analysis.vulnerability.name }}
{% trans "Noncompliant Code Example" %}
{% trans "Compliant Solution" %}
{% trans "Business Implication" %}
{% trans "Related Vulnerabilities" %}

{% trans "Report Summary" %}

{% if data.show_copyright %}{% if data.partner and data.partner.name %}{{ data.partner.name }}{% trans ", powered by " %}{% endif %}{% trans "Appknox" %}{% if data.partner and data.partner.name %}{% trans "," %}{% endif %}{% trans " conducted a security assessment of the mobile application. " %}{% endif %}{% trans "This report contains all the findings during the automated and manual auditing processes. It also contains the process of discovering those vulnerabilities in the first place, and ways to remediate those issues." %}

{% trans "Audit Summary" %}
{% for analysis in file.sorted_analyses %} {% if not analysis.is_ignored %}{% endif %} {% endfor %} {% if file.guaranteed_profile.rps.show_ignored_analyses %} {% for analysis in file.sorted_analyses %} {% if analysis.is_ignored %}{% endif %} {% endfor %} {% endif %}
{{ analysis.vulnerability.name }} {% for type in analysis.vulnerability.get_types_display %}{{type}}{% endfor %}
{{ analysis.vulnerability.description | safe }}		{% if analysis.show_cvss %}

{{analysis.cvss_base}}

{% endif %}
{{ analysis.get_computed_risk_display }} Risk
{% if analysis.overridden_risk %}
{% endif %}
{{ analysis.vulnerability.name }} {% for type in analysis.vulnerability.get_types_display %}{{type}}{% endfor %}
{{ analysis.vulnerability.description | safe }}		{% if analysis.is_ignored %}{% endif %} {% if analysis.show_cvss %}

{{analysis.cvss_base}}

{% endif %}
{{ analysis.get_computed_risk_display }} Risk
{% if analysis.overridden_risk %}
{% endif %}
{% trans "Priority Level" %}{% trans "Number of failed test cases" %}
{% trans "Critical Risk" %}{{ file.risk_count_critical }}
{% trans "High Risk" %}{{ file.risk_count_high }}
{% trans "Medium Risk" %}{{ file.risk_count_medium }}
{% trans "Low Risk" %}{{ file.risk_count_low }}
{% if data.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating" %}

{% if data.show_copyright %}{% trans "Appknox " %}{% endif %}{% trans "Security Rating:" %} {{ rating }}% {% trans "Unsecured" %}

{% for analysis in file.sorted_analyses %} {% if analysis.computed_risk > RiskEnum.PASSED and not analysis.is_ignored %}

{{ analysis.vulnerability.name }}

{{ analysis.vulnerability.intro | safe }}
{% trans "Risk Rating" %} : {{ analysis.get_computed_risk_display }}
{% if analysis.overridden_risk %}
{% endif %}
{% for type in analysis.vulnerability.get_types_display %}{{type}}{% endfor %}
{% trans "Regulatory" %}
{% if analysis.show_cvss %}{% endif %} {% if analysis.owasp_categories %}{% endif %}
CVSSv3{{analysis.cvss_base}}
CVSS Metrics
    {% for metric in analysis.cvss_metrics_humanized %}
  • {{ metric.key }}{{ metric.value }}
    • {% endfor %}
OWASP
    {% for metric in analysis.owasp_categories %}
  • {{ metric.code }}{{ metric.title }}
    • {% endfor %}
{% if analysis.pcidss_categories %}
PCI-DSS
{% for metric in analysis.pcidss_categories %}
{{ metric.code }}
{{ metric.title }}
{% trans "Description" %}
{{ metric.description }}
{% endfor %} {% endif %}
{% trans "Risk Assessment" %}

{{ analysis.vulnerability.description | safe }}

{% for finding in analysis.findings %} {% if finding.title %}
{{ finding.title | escape }}
{% endif %}
{{ finding.description | escape }}
{% endfor %}
{% if analysis.vulnerability.non_compliant %}
{% trans "Noncompliant Code Example" %}
{{ analysis.vulnerability.non_compliant | safe }}
{% endif %} {% if analysis.vulnerability.compliant %}
{% trans "Compliant Solution" %}
{{ analysis.vulnerability.compliant | safe }}
{% endif %} {% if analysis.vulnerability.business_implication %}
{% trans "Business Implication" %}
{{ analysis.vulnerability.business_implication | safe }}
{% endif %} {% if analysis.vulnerability.related_to %}
{% trans "Related Vulnerabilities" %}
{{ analysis.vulnerability.related_to | safe }}
{% endif %}
{% endif %} {% endfor %} {% if file.guaranteed_profile.rps.show_ignored_analyses and ignored_analyses_count %}

{% trans "Ignored Analyses" %}

{% for analysis in file.sorted_analyses %} {% if analysis.computed_risk > RiskEnum.PASSED and analysis.is_ignored %}

{{ analysis.vulnerability.name }}

{{ analysis.vulnerability.intro | safe }}
{% trans "Risk Rating" %} : {{ analysis.get_computed_risk_display }}
{% if analysis.overridden_risk %}
{% endif %}
{% for type in analysis.vulnerability.get_types_display %}{{type}}{% endfor %}
{% trans "Regulatory" %}
{% if analysis.show_cvss %}{% endif %} {% if analysis.owasp_categories %}{% endif %}
CVSSv3{{analysis.cvss_base}}
CVSS Metrics
    {% for metric in analysis.cvss_metrics_humanized %}
  • {{ metric.key }}{{ metric.value }}
    • {% endfor %}
OWASP
    {% for metric in analysis.owasp_categories %}
  • {{ metric.code }}{{ metric.title }}
    • {% endfor %}
{% if analysis.pcidss_categories %}
PCI-DSS
{% for metric in analysis.pcidss_categories %}
{{ metric.code }}
{{ metric.title }}
{% trans "Description" %}
{{ metric.description }}
{% endfor %} {% endif %}
{% trans "Risk Assessment" %}

{{ analysis.vulnerability.description | safe }}

{% for finding in analysis.findings %} {% if finding.title %}
{{ finding.title | escape }}
{% endif %}
{{ finding.description | escape }}
{% endfor %}
{% if analysis.vulnerability.non_compliant %}
{% trans "Noncompliant Code Example" %}
{{ analysis.vulnerability.non_compliant | safe }}
{% endif %} {% if analysis.vulnerability.compliant %}
{% trans "Compliant Solution" %}
{{ analysis.vulnerability.compliant | safe }}
{% endif %} {% if analysis.vulnerability.business_implication %}
{% trans "Business Implication" %}
{{ analysis.vulnerability.business_implication | safe }}
{% endif %} {% if analysis.vulnerability.related_to %}
{% trans "Related Vulnerabilities" %}
{{ analysis.vulnerability.related_to | safe }}
{% endif %}
{% endif %} {% endfor %}
{% endif %}

{% trans "References" %}

  1. Mobile Top 10 OWASP Categories | 2016
  2. Web Top 10 OWASP Categories | 2013