Benjamin Admin
57c0f940a2
CI / detect-changes (push) Successful in 11s
CI / branch-name (push) Has been skipped
CI / nodejs-build (push) Successful in 2m19s
CI / test-go (push) Has been skipped
CI / test-python-document-crawler (push) Has been skipped
CI / test-python-dsms-gateway (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / validate-canonical-controls (push) Successful in 16s
CI / loc-budget (push) Failing after 15s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / iace-gt-coverage (push) Has been skipped
CI / test-python-backend (push) Successful in 37s
P56 Anti-Auditing-Detection als constructive Compliance-Finding (Audit-API-
Empfehlung statt Anklage, weil Mercedes berechtigt Bots blockiert)
P57 Phase G vendor_details Union mit cmp_vendors -> 42 Anbieter sichtbar
P58 Anti-Audit-Detection robuster (Script-Domain-Check + Settings-spezifisch)
P59 Cookie-Behavior-Validator (4 Layer, 3-Tier-Severity: MEDIUM=Kategorie-
Mismatch / HIGH=Zweck-Mismatch / CRITICAL=beide=Vorsatz-Indiz)
+ Open Cookie Database (CC0) als Library-Seed (2264 Cookies)
P59b Cookie-Behavior in Banner-Check verdrahtet + Mail-Block (BUGFIX:
SessionLocal selbst oeffnen, db war im Background-Task nicht im Scope)
Mail-Polish nach Mercedes-Review:
P63 Banner-Footer-Links auch im wb7-link/role=link erkennen (Shadow-DOM-
Walker label-based statt nur <a href>)
P64 Re-Access-Severity: MEDIUM statt HIGH, wenn Footer "Einstellungen" oder
Mercedes-typisch existiert; OEM-Footer-Detection (wb7-footer)
P65 Text-Truncation: Word-Boundary statt Zeichen-Cut (kein "einfa"-Bruch
mehr in Sofortmassnahmen)
P66 GF-Aktionen: Service-Zweck vs Cookie-Zweck explizit erklaert
(haeufige Verwechslung Marketing/GF: "Akamai-Beschreibung" != Cookie-
Zweck pro DSK-OH 2024)
P67 Stirring-Finding mit "Verlust-Framing"-Erklaerung + Alt-vs-Neutral-
Beispiel, statt nur EDPB-Fachbegriff
Compliance-Advisor FAQ (admin agent-core/soul):
+ CNIL/EDPB Top-Bussgelder (Google 100M, Meta 60M, Amazon 35M)
+ Deutsche Praezedenz (LG Muenchen Google Fonts, EuGH Planet49, BGH I ZR 7/16)
+ 4 Risiko-Pfade (Bussgeld/Abmahnung/Sammelklage/NOYB) + Berechnungs-Methodik
Document-Generator Templates: AGB-DE (142), Impressum (140), Widerrufs-
formular-Anlage (143), DSR-Process-Dedup (139), Cookie-Library (144).
Architektur: doc_action_mappings.py + banner_dom_walkers.py +
cookie_behavior_validator.py + vendor_detail_extractor.py rausgezogen,
um die 500-LOC-Caps in agent_doc_check_report.py und
banner_text_checker.py einzuhalten.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
236 lines
11 KiB
Python
236 lines
11 KiB
Python
"""
|
|
P18 — Erweiterter Banner-Block fuer die Email.
|
|
|
|
Rendert die Daten aus dem consent-tester die heute weggeworfen wurden:
|
|
- 3-Phasen-Cookie-Tabelle (before_consent / after_reject / after_accept)
|
|
- Banner-Quality-Score (completeness/correctness/violations)
|
|
- Per-Category-Tracker-Listing
|
|
- Violations-Liste mit Rechtsgrundlagen
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
|
|
def _color_for(pct: int) -> str:
|
|
return ("#16a34a" if pct >= 80 else
|
|
"#d97706" if pct >= 50 else "#dc2626")
|
|
|
|
|
|
def _short_phase_label(key: str) -> str:
|
|
return {
|
|
"before_consent": "Vor Consent",
|
|
"after_reject": "Nach Ablehnung",
|
|
"after_accept": "Nach Annahme",
|
|
}.get(key, key)
|
|
|
|
|
|
def _phase_color(key: str, cookie_count: int) -> str:
|
|
if key == "before_consent":
|
|
return "#16a34a" if cookie_count == 0 else "#dc2626"
|
|
if key == "after_reject":
|
|
return "#16a34a" if cookie_count <= 1 else "#d97706"
|
|
return "#94a3b8"
|
|
|
|
|
|
def build_banner_deep_html(banner_result: dict | None) -> str:
|
|
"""Render: Banner-Quality + Phases + Violations.
|
|
|
|
Konsumiert das volle consent-tester-Response. Komplementiert
|
|
`build_provider_list_html` (das nur Summary + TCF-Vendor-Tabelle macht).
|
|
"""
|
|
if not banner_result:
|
|
return ""
|
|
|
|
parts: list[str] = [
|
|
'<div style="font-family:-apple-system,BlinkMacSystemFont,sans-serif;'
|
|
'max-width:700px;margin:0 auto 16px;padding:14px 18px;'
|
|
'background:#fff;border:1px solid #cbd5e1;border-radius:8px">'
|
|
'<h3 style="margin:0 0 12px;font-size:14px;color:#0f172a">'
|
|
'Cookie-Banner — technische Analyse</h3>'
|
|
]
|
|
|
|
# 1) Quality-Score-Cards
|
|
compl = banner_result.get("completeness_pct")
|
|
corr = banner_result.get("correctness_pct")
|
|
summary = banner_result.get("summary") or {}
|
|
n_critical = summary.get("critical", 0)
|
|
n_high = summary.get("high", 0)
|
|
if compl is not None or corr is not None:
|
|
parts.append(
|
|
'<table style="width:100%;border-collapse:separate;'
|
|
'border-spacing:6px;margin-bottom:10px"><tr>'
|
|
)
|
|
if compl is not None:
|
|
c = _color_for(int(compl))
|
|
parts.append(
|
|
f'<td style="width:33%;padding:8px 10px;background:#f8fafc;'
|
|
f'border-radius:5px;border-left:3px solid {c}">'
|
|
f'<div style="font-size:10px;color:#64748b;text-transform:uppercase">'
|
|
f'Vollstaendigkeit</div>'
|
|
f'<div style="font-size:18px;font-weight:700;color:{c}">{compl}%</div>'
|
|
f'</td>'
|
|
)
|
|
if corr is not None:
|
|
c = _color_for(int(corr))
|
|
parts.append(
|
|
f'<td style="width:33%;padding:8px 10px;background:#f8fafc;'
|
|
f'border-radius:5px;border-left:3px solid {c}">'
|
|
f'<div style="font-size:10px;color:#64748b;text-transform:uppercase">'
|
|
f'Korrektheit</div>'
|
|
f'<div style="font-size:18px;font-weight:700;color:{c}">{corr}%</div>'
|
|
f'</td>'
|
|
)
|
|
viol_c = ("#dc2626" if n_critical + n_high > 0 else
|
|
"#d97706" if (summary.get("total_violations") or 0) > 0 else
|
|
"#16a34a")
|
|
parts.append(
|
|
f'<td style="width:33%;padding:8px 10px;background:#f8fafc;'
|
|
f'border-radius:5px;border-left:3px solid {viol_c}">'
|
|
f'<div style="font-size:10px;color:#64748b;text-transform:uppercase">'
|
|
f'Verstoesse</div>'
|
|
f'<div style="font-size:18px;font-weight:700;color:{viol_c}">'
|
|
f'{summary.get("total_violations", 0)}'
|
|
f'<span style="font-size:11px;color:#64748b;margin-left:6px">'
|
|
f'(crit:{n_critical} high:{n_high})</span></div></td>'
|
|
)
|
|
parts.append('</tr></table>')
|
|
|
|
# 2) 3-Phasen-Tabelle
|
|
phases = banner_result.get("phases") or {}
|
|
if phases:
|
|
parts.append(
|
|
'<div style="font-size:11px;color:#475569;margin:8px 0 4px;'
|
|
'font-weight:600">Cookie-Setzungen pro Phase '
|
|
'(echter Browser-Test):</div>'
|
|
'<table style="width:100%;border-collapse:collapse;font-size:11px;'
|
|
'margin-bottom:10px;border:1px solid #e2e8f0">'
|
|
'<thead><tr style="background:#f1f5f9;color:#475569;text-align:left">'
|
|
'<th style="padding:5px 8px">Phase</th>'
|
|
'<th style="padding:5px 8px;text-align:center">Cookies</th>'
|
|
'<th style="padding:5px 8px;text-align:center">Tracker</th>'
|
|
'<th style="padding:5px 8px">Auffaelligkeiten</th>'
|
|
'</tr></thead><tbody>'
|
|
)
|
|
for key in ("before_consent", "after_reject", "after_accept"):
|
|
ph = phases.get(key) or {}
|
|
if not isinstance(ph, dict): continue
|
|
cookies = ph.get("cookies") or []
|
|
trackers = ph.get("tracking_services") or []
|
|
new_track = ph.get("new_tracking") or []
|
|
violations = ph.get("violations") or []
|
|
undoc = ph.get("undocumented") or []
|
|
color = _phase_color(key, len(cookies))
|
|
issues_parts = []
|
|
if violations: issues_parts.append(f"{len(violations)} Verstoss")
|
|
if new_track: issues_parts.append(f"{len(new_track)} neue Tracker")
|
|
if undoc: issues_parts.append(f"{len(undoc)} undokumentiert")
|
|
issues_str = ", ".join(issues_parts) or "—"
|
|
parts.append(
|
|
f'<tr style="border-top:1px solid #e2e8f0">'
|
|
f'<td style="padding:5px 8px;color:#1e293b;font-weight:600">'
|
|
f'<span style="display:inline-block;width:6px;height:6px;'
|
|
f'border-radius:50%;background:{color};margin-right:6px"></span>'
|
|
f'{_short_phase_label(key)}</td>'
|
|
f'<td style="padding:5px 8px;text-align:center;color:{color};'
|
|
f'font-weight:600">{len(cookies)}</td>'
|
|
f'<td style="padding:5px 8px;text-align:center">{len(trackers)}</td>'
|
|
f'<td style="padding:5px 8px;color:#475569">{issues_str}</td>'
|
|
f'</tr>'
|
|
)
|
|
parts.append('</tbody></table>')
|
|
|
|
# 3) Per-Category-Tracker
|
|
cats = banner_result.get("category_tests") or []
|
|
if cats:
|
|
non_essential = [c for c in cats if c.get("category") != "necessary"]
|
|
if non_essential:
|
|
parts.append(
|
|
'<div style="font-size:11px;color:#475569;margin:8px 0 4px;'
|
|
'font-weight:600">Provider-Listing pro Banner-Kategorie:</div>'
|
|
'<table style="width:100%;border-collapse:collapse;font-size:11px;'
|
|
'margin-bottom:10px;border:1px solid #e2e8f0">'
|
|
'<thead><tr style="background:#f1f5f9;color:#475569;text-align:left">'
|
|
'<th style="padding:5px 8px">Kategorie</th>'
|
|
'<th style="padding:5px 8px;text-align:center">Anbieter</th>'
|
|
'<th style="padding:5px 8px">Hinweis</th>'
|
|
'</tr></thead><tbody>'
|
|
)
|
|
for c in non_essential:
|
|
n = len(c.get("tracking_services") or [])
|
|
label = c.get("category_label") or c.get("category", "?")
|
|
pdv = c.get("provider_details_visible")
|
|
# P19: echtes Signal aus Click-Through-Test
|
|
if pdv is False:
|
|
color, hint = "#dc2626", ("Banner zeigt KEINE Provider-"
|
|
"Details — keine informierte Einwilligung")
|
|
elif pdv is True:
|
|
color, hint = "#16a34a", ""
|
|
elif n == 0:
|
|
color, hint = "#d97706", ("Keine Anbieter erkannt (vermutlich "
|
|
"kein Provider-Listing im Banner)")
|
|
else:
|
|
color, hint = "#16a34a", ""
|
|
parts.append(
|
|
f'<tr style="border-top:1px solid #e2e8f0">'
|
|
f'<td style="padding:5px 8px">{label}</td>'
|
|
f'<td style="padding:5px 8px;text-align:center;color:{color};'
|
|
f'font-weight:600">{n}</td>'
|
|
f'<td style="padding:5px 8px;color:#dc2626;font-size:10px">'
|
|
f'{hint}</td></tr>'
|
|
)
|
|
parts.append('</tbody></table>')
|
|
|
|
# 4) Violations mit Rechtsgrundlage
|
|
violations = (banner_result.get("banner_checks") or {}).get("violations", [])
|
|
if violations:
|
|
parts.append(
|
|
'<div style="font-size:11px;color:#475569;margin:8px 0 4px;'
|
|
'font-weight:600">Erkannte Banner-Verstoesse:</div>'
|
|
'<ul style="margin:0 0 8px 18px;padding:0;font-size:11px;color:#1e293b">'
|
|
)
|
|
for v in violations[:8]:
|
|
sev = (v.get("severity") or "MEDIUM").upper()
|
|
sev_c = ("#dc2626" if sev in ("CRITICAL", "HIGH") else
|
|
"#d97706" if sev == "MEDIUM" else "#94a3b8")
|
|
parts.append(
|
|
f'<li style="margin-bottom:6px">'
|
|
f'<span style="display:inline-block;background:{sev_c};color:#fff;'
|
|
f'font-size:9px;padding:1px 5px;border-radius:3px;margin-right:6px">'
|
|
f'{sev}</span>{v.get("text", "")[:200]}'
|
|
f'<div style="font-size:10px;color:#94a3b8;margin-top:2px;'
|
|
f'font-style:italic">Quelle: {v.get("legal_ref", "")}</div></li>'
|
|
)
|
|
parts.append('</ul>')
|
|
|
|
# 5) P59b: Cookie-Behavior-Findings (deklariert vs. tatsaechlich)
|
|
cb_findings = banner_result.get("cookie_behavior_findings") or []
|
|
if cb_findings:
|
|
parts.append(
|
|
'<div style="margin:14px 0 4px;padding:8px 12px;'
|
|
'background:#fef9e7;border-left:3px solid #d97706;border-radius:4px">'
|
|
'<div style="font-size:12px;color:#92400e;font-weight:600;'
|
|
'margin-bottom:6px">Cookie-Verhaltens-Check '
|
|
'(P59 — deklarierter Zweck vs. tatsaechliches Verhalten)</div>'
|
|
'<ul style="margin:0 0 0 18px;padding:0;font-size:11px;color:#1e293b">'
|
|
)
|
|
for f in cb_findings[:20]:
|
|
sev = (f.get("severity") or "MEDIUM").upper()
|
|
sev_c = ("#dc2626" if sev in ("CRITICAL", "HIGH") else
|
|
"#d97706" if sev == "MEDIUM" else "#94a3b8")
|
|
cname = f.get("cookie_name", "?")
|
|
parts.append(
|
|
f'<li style="margin-bottom:6px">'
|
|
f'<span style="display:inline-block;background:{sev_c};color:#fff;'
|
|
f'font-size:9px;padding:1px 5px;border-radius:3px;margin-right:6px">'
|
|
f'{sev}</span><code style="font-size:10px;background:#f1f5f9;'
|
|
f'padding:1px 4px;border-radius:2px">{cname}</code>: '
|
|
f'{f.get("text", "")[:280]}'
|
|
f'<div style="font-size:10px;color:#94a3b8;margin-top:2px;'
|
|
f'font-style:italic">Quelle: {f.get("legal_ref", "")} · '
|
|
f'Layer {f.get("layer", "?")}</div></li>'
|
|
)
|
|
parts.append('</ul></div>')
|
|
|
|
parts.append('</div>')
|
|
return "".join(parts)
|