686834cea0
Build + Deploy / build-ai-sdk (push) Failing after 36s
Build + Deploy / build-developer-portal (push) Successful in 8s
Build + Deploy / build-tts (push) Successful in 7s
Build + Deploy / build-document-crawler (push) Successful in 7s
Build + Deploy / build-admin-compliance (push) Successful in 8s
Build + Deploy / build-backend-compliance (push) Successful in 8s
CI / nodejs-build (push) Successful in 3m14s
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / test-go (push) Failing after 46s
CI / test-python-backend (push) Successful in 43s
CI / test-python-document-crawler (push) Successful in 29s
CI / test-python-dsms-gateway (push) Successful in 30s
CI / validate-canonical-controls (push) Successful in 16s
Build + Deploy / build-dsms-gateway (push) Successful in 8s
Build + Deploy / build-dsms-node (push) Successful in 8s
CI / branch-name (push) Has been skipped
Build + Deploy / trigger-orca (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / loc-budget (push) Failing after 17s
CI / secret-scan (push) Has been skipped
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
1. EU Institution Checks (Verordnung 2018/1725): - New doc_type "eu_institution" with 9 L1 + 15 L2 checks - Both German + English patterns (EU institutions are multilingual) - Auto-detection via "2018/1725", "EDSB", "EDPS" keywords - Correct article references (Art. 15 instead of 13, Art. 5 instead of 6) 2. Banner Check Integration: - banner_runner.py maps scan results to 36 L1/L2 structured checks - BannerCheckTab shows hierarchical ChecklistView with hints - 3-phase summary (cookies/scripts before/after consent) - /scan endpoint now includes structured_checks in response 3. JS-heavy Website Fixes (dm, Zalando, HWK): - dsi_helpers.py: goto_resilient (networkidle→domcontentloaded fallback) - try_dismiss_consent_banner before text extraction - PDF redirect detection (dm.de redirects to GCS PDF) 4. Caritas False Positive Fixes: - Phone regex allows parentheses: +49 (0)761 → now matches - "Recht auf Widerspruch" (3 words) + §23 KDG → matches Art. 21 - Church authorities: "Katholisches Datenschutzzentrum" recognized Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
233 lines
8.8 KiB
TypeScript
233 lines
8.8 KiB
TypeScript
'use client'
|
|
|
|
import React, { useState } from 'react'
|
|
import { ChecklistView } from './ChecklistView'
|
|
|
|
interface CheckItem {
|
|
id: string
|
|
label: string
|
|
passed: boolean
|
|
severity: string
|
|
matched_text: string
|
|
level?: number
|
|
parent?: string | null
|
|
skipped?: boolean
|
|
hint?: string
|
|
}
|
|
|
|
interface BannerResult {
|
|
banner_detected: boolean
|
|
banner_provider: string
|
|
banner_checks?: {
|
|
violations: { code: string; text: string; severity: string }[]
|
|
has_impressum_link?: boolean
|
|
has_dse_link?: boolean
|
|
}
|
|
structured_checks?: CheckItem[]
|
|
completeness_pct?: number
|
|
correctness_pct?: number
|
|
phases?: {
|
|
before_consent: { cookies: string[]; scripts: string[]; tracking_services: string[]; violations: any[] }
|
|
after_reject: { cookies: string[]; scripts: string[]; new_tracking: string[]; violations: any[] }
|
|
after_accept: { cookies: string[]; scripts: string[]; new_tracking: string[]; undocumented: string[] }
|
|
}
|
|
}
|
|
|
|
export function BannerCheckTab() {
|
|
const [url, setUrl] = useState('')
|
|
const [loading, setLoading] = useState(false)
|
|
const [progress, setProgress] = useState('')
|
|
const [error, setError] = useState<string | null>(null)
|
|
const [result, setResult] = useState<BannerResult | null>(null)
|
|
|
|
const handleScan = async (e: React.FormEvent) => {
|
|
e.preventDefault()
|
|
if (!url.trim()) return
|
|
|
|
setLoading(true)
|
|
setError(null)
|
|
setResult(null)
|
|
setProgress('Cookie-Banner wird analysiert...')
|
|
|
|
try {
|
|
const res = await fetch('/api/sdk/v1/agent/banner-check', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ url: url.trim() }),
|
|
})
|
|
if (!res.ok) throw new Error(`Fehler: ${res.status}`)
|
|
const data = await res.json()
|
|
|
|
if (data.scan_id) {
|
|
let attempts = 0
|
|
while (attempts < 60) {
|
|
await new Promise(r => setTimeout(r, 3000))
|
|
const poll = await fetch(`/api/sdk/v1/agent/banner-check?scan_id=${data.scan_id}`)
|
|
if (!poll.ok) { attempts++; continue }
|
|
const pollData = await poll.json()
|
|
if (pollData.progress) setProgress(pollData.progress)
|
|
if (pollData.status === 'completed' && pollData.result) {
|
|
setResult(pollData.result)
|
|
break
|
|
}
|
|
if (pollData.status === 'failed') throw new Error(pollData.error || 'Scan fehlgeschlagen')
|
|
attempts++
|
|
}
|
|
} else {
|
|
setResult(data)
|
|
}
|
|
} catch (e) {
|
|
setError(e instanceof Error ? e.message : 'Unbekannter Fehler')
|
|
} finally {
|
|
setLoading(false)
|
|
setProgress('')
|
|
}
|
|
}
|
|
|
|
const structuredChecks = result?.structured_checks || []
|
|
const hasStructured = structuredChecks.length > 0
|
|
const compPct = result?.completeness_pct ?? 0
|
|
const corrPct = result?.correctness_pct ?? 0
|
|
|
|
// Build ChecklistView-compatible result for structured checks
|
|
const checklistResults = hasStructured ? [{
|
|
label: `Cookie-Banner: ${result?.banner_provider || 'Unbekannt'}`,
|
|
url: url,
|
|
doc_type: 'banner',
|
|
word_count: 0,
|
|
completeness_pct: compPct,
|
|
correctness_pct: corrPct,
|
|
checks: structuredChecks,
|
|
findings_count: structuredChecks.filter(c => !c.passed && !c.skipped).length,
|
|
error: '',
|
|
}] : []
|
|
|
|
return (
|
|
<div className="space-y-4">
|
|
<div className="bg-blue-50 border border-blue-200 rounded-lg p-4">
|
|
<h3 className="text-sm font-semibold text-blue-900">Cookie-Banner Compliance Check</h3>
|
|
<p className="text-xs text-blue-700 mt-1">
|
|
Playwright-basierter 3-Phasen-Test: Vor Interaktion, nach Ablehnen, nach Akzeptieren.
|
|
Prueft Dark Patterns, Pre-Consent-Cookies, Farbkontrast, Klick-Paritaet und 36 weitere Kriterien.
|
|
</p>
|
|
</div>
|
|
|
|
<form onSubmit={handleScan} className="flex gap-3">
|
|
<input
|
|
type="url" value={url} onChange={e => setUrl(e.target.value)}
|
|
placeholder="https://www.example.com/"
|
|
className="flex-1 px-4 py-3 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent text-sm"
|
|
disabled={loading} required
|
|
/>
|
|
<button type="submit" disabled={loading || !url.trim()}
|
|
className="px-6 py-3 bg-purple-600 text-white rounded-lg hover:bg-purple-700 disabled:opacity-50 transition-colors flex items-center gap-2 text-sm font-medium">
|
|
{loading ? (
|
|
<><svg className="animate-spin w-4 h-4" fill="none" viewBox="0 0 24 24">
|
|
<circle className="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" strokeWidth="4" />
|
|
<path className="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z" />
|
|
</svg>Pruefe...</>
|
|
) : 'Banner pruefen'}
|
|
</button>
|
|
</form>
|
|
|
|
{progress && (
|
|
<div className="bg-purple-50 border border-purple-200 rounded-lg p-4 text-sm text-purple-700 flex items-center gap-3">
|
|
<svg className="animate-spin w-5 h-5 text-purple-500 shrink-0" fill="none" viewBox="0 0 24 24">
|
|
<circle className="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" strokeWidth="4" />
|
|
<path className="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z" />
|
|
</svg>
|
|
{progress}
|
|
</div>
|
|
)}
|
|
|
|
{error && (
|
|
<div className="bg-red-50 border border-red-200 rounded-lg p-4 text-sm text-red-700">{error}</div>
|
|
)}
|
|
|
|
{result && (
|
|
<div className="space-y-4">
|
|
{/* 3-Phase Summary Card */}
|
|
{result.phases && (
|
|
<div className="bg-white border border-gray-200 rounded-xl shadow-sm overflow-hidden">
|
|
<div className="px-6 py-4 bg-gray-50 border-b border-gray-200">
|
|
<div className="flex items-center gap-3">
|
|
<span className="text-2xl">
|
|
{result.banner_detected ? '\u{1F6E1}\u{FE0F}' : '\u26A0\u{FE0F}'}
|
|
</span>
|
|
<div>
|
|
<h3 className="text-sm font-semibold text-gray-900">
|
|
{result.banner_detected
|
|
? `Banner erkannt: ${result.banner_provider || 'Unbekannter Anbieter'}`
|
|
: 'Kein Cookie-Banner erkannt'}
|
|
</h3>
|
|
<p className="text-xs text-gray-500 mt-0.5">
|
|
3-Phasen-Analyse: Cookies und Scripts vor/nach Interaktion
|
|
</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div className="px-6 py-3 grid grid-cols-3 gap-4">
|
|
<PhaseBox
|
|
label="Vor Consent"
|
|
icon="\uD83D\uDD12"
|
|
cookies={result.phases.before_consent.cookies?.length ?? 0}
|
|
scripts={result.phases.before_consent.scripts?.length ?? 0}
|
|
violations={result.phases.before_consent.violations?.length ?? 0}
|
|
/>
|
|
<PhaseBox
|
|
label="Nach Ablehnen"
|
|
icon="\uD83D\uDEAB"
|
|
cookies={result.phases.after_reject.cookies?.length ?? 0}
|
|
scripts={result.phases.after_reject.scripts?.length ?? 0}
|
|
violations={result.phases.after_reject.violations?.length ?? 0}
|
|
/>
|
|
<PhaseBox
|
|
label="Nach Akzeptieren"
|
|
icon="\u2705"
|
|
cookies={result.phases.after_accept.cookies?.length ?? 0}
|
|
scripts={result.phases.after_accept.scripts?.length ?? 0}
|
|
violations={0}
|
|
/>
|
|
</div>
|
|
</div>
|
|
)}
|
|
|
|
{/* Structured L1/L2 Checklist */}
|
|
{hasStructured && (
|
|
<div className="bg-white border border-gray-200 rounded-xl p-6 shadow-sm">
|
|
<ChecklistView results={checklistResults} />
|
|
</div>
|
|
)}
|
|
|
|
{!result.banner_detected && !hasStructured && (
|
|
<div className="bg-white border border-gray-200 rounded-xl p-6 shadow-sm">
|
|
<p className="text-sm text-gray-500">
|
|
Kein Cookie-Banner auf dieser Seite gefunden. Falls Cookies gesetzt werden, ist ein Banner nach ss25 TDDDG Pflicht.
|
|
</p>
|
|
</div>
|
|
)}
|
|
</div>
|
|
)}
|
|
</div>
|
|
)
|
|
}
|
|
|
|
function PhaseBox({ label, icon, cookies, scripts, violations }: {
|
|
label: string; icon: string; cookies: number; scripts: number; violations: number
|
|
}) {
|
|
return (
|
|
<div className="text-center">
|
|
<div className="text-lg">{icon}</div>
|
|
<div className="text-xs font-medium text-gray-700">{label}</div>
|
|
<div className="text-xs text-gray-500 mt-1">
|
|
{cookies} Cookies, {scripts} Scripts
|
|
</div>
|
|
{violations > 0 && (
|
|
<div className="text-xs text-red-600 font-medium">
|
|
{violations} Verstoesse
|
|
</div>
|
|
)}
|
|
</div>
|
|
)
|
|
}
|