update

Backend/application/db/schema.txt

@@ -0,0 +1,37 @@
+CREATE TABLE userronin (
+ id INTEGER NOT NULL, 
+ login VARCHAR(30), 
+ passhash VARCHAR(128), 
+ mail VARCHAR(128), 
+ last_ip VARCHAR(40), 
+ owner VARCHAR(12), 
+ created_at TIMESTAMP, 
+ update_at TIMESTAMP, 
+ PRIMARY KEY (id), 
+ UNIQUE (login), 
+ UNIQUE (mail)
+);
+CREATE TABLE rules (
+ id INTEGER NOT NULL, 
+ lang VARCHAR(32), 
+ title VARCHAR(128), 
+ description TEXT, 
+ level VARCHAR(16), 
+ match1 VARCHAR(512), 
+ match2 VARCHAR(512), 
+ created_at TIMESTAMP, 
+ update_at TIMESTAMP, 
+ PRIMARY KEY (id), 
+ UNIQUE (title)
+);
+CREATE TABLE cache (
+ id INTEGER NOT NULL, 
+ title VARCHAR(128), 
+ path VARCHAR(2048), 
+ lines VARCHAR(2048), 
+ risk VARCHAR(32), 
+ lang VARCHAR(32), 
+ rule_id VARCHAR(16), 
+ PRIMARY KEY (id)
+);
+

Backend/application/engine_controller.py

@@ -32,6 +32,7 @@ def list_table_cache():
  line["title"]=str(item.title)
  line["path"]=str(item.path)
  line["lines"]=str(item.lines)
+ line["risk"]=str(item.risk)
  line["lang"]=str(item.lang)
  Cache_Array.append(line)
  return jsonify(Cache_Array)
@@ -91,6 +92,7 @@ def search_sinks(directory, extension,sink):
  regex2=item.match2
  rule=item.title
  rule_id=item.id
+ risk=item.level
  lines=test_match_regex(current_path,regex1,regex2)
  else:
  lines=test_match_regex(current_path,sink,"0")
@@ -101,6 +103,7 @@ def search_sinks(directory, extension,sink):
  element['lines']=lines
  element['path']=current_path
  element['lang']=extension
+ element['risk']=risk
  if sink == 0:
  element['rule_id']=rule_id
  element['title']=rule

Backend/application/engine_model.py

@@ -9,6 +9,7 @@ class Engine(db.Model):
  title = db.Column(db.String(128))
  path = db.Column(db.String(2048))
  lines = db.Column(db.String(2048))
+ risk = db.Column(db.String(32))
  lang = db.Column(db.String(32))
  rule_id = db.Column(db.String(16))
 

Frontend/application/engine_controller.py

@@ -40,6 +40,8 @@ def open_code(request):
  lang="NASM"
  if "swift" in lang:
  lang="Swift"
+ if "kt" in lang:
+ lang="Java"
  #TODO improve validate here...
  if not os.path.isfile(path):
  return render_template('engine_forms/clear.html',title="File path not exist")