{% extends "base.html" %}

{% block title %}{{ threat_id }}: {{ threat.description }} - Threat Model{% endblock %}

{% block content %}
<h1>
	<a href="https://capec.mitre.org/data/definitions/{{ threat_id.replace('CAPEC-', '') }}.html">
	{{ threat_id }}: {{ threat.description }}
	</a>
</h1>

<p>{{ threat.details }}</p>

{% if threat.example %}
<h2>Examples</h2>
<p>{{ threat.example }}</p>
{% endif %}
{% if threat.comment %}
<h2>Comment</h2>
<p>{{ threat.comment }}</p>
{% endif %}

<div class="stats">
    <div class="count-box count-box--{{ (threat.severity or 'Unknown').lower().replace(' ', '-') }}">
        <div class="count-box__value">{{ threat.severity or "Unknown" }}</div>
        <div class="count-box__label">Severity</div>
    </div>
    <div class="count-box count-box--red">
        <div class="count-box__value">{{ frequency }}</div>
        <div class="count-box__note">occurrences in scenarios</div>
        <div class="count-box__label">Frequency</div>
    </div>
    <div class="count-box count-box--orange">
        <div class="count-box__value">{{ components | length }}</div>
        <div class="count-box__label">Affected Components</div>
    </div>
    <div class="count-box count-box--blue">
        <div class="count-box__value">{{ threat_scenario_data | length }}</div>
        <div class="count-box__label">Affected Scenarios</div>
    </div>
</div>

<h2>Requirements and Mitigations</h2>
<div class="stats">
    <div class="card">
        <h3>Requirements</h3>
        <p>Component properties that must be true for this threat to apply:</p>
        <div class="tag-list">
            {% for prop in threat.mapping.requirements %}
            <span class="tag tag--true">{{ prop | replace('_', ' ') }}</span>
            {% else %}
            <em>None specified.</em>
            {% endfor %}
        </div>
    </div>
    <div class="card">
        <h3>Mitigations</h3>
        <p>Component properties that mitigate this threat:</p>
        <div class="tag-list">
            {% for prop in threat.mapping.mitigations %}
            <span class="tag tag--false">{{ prop | replace('_', ' ') }}</span>
            {% else %}
            <em>None specified.</em>
            {% endfor %}
        </div>
    </div>
</div>

<h2>Affected Components</h2>
{% if components %}
<table>
    <thead>
        <tr>
            <th>Component</th>
            <th>Description</th>
            <th>Boundary</th>
        </tr>
    </thead>
    <tbody>
        {% for comp_name in components %}
        <tr>
            <td><a href="component_{{ comp_name | slugify }}.html">{{ comp_name }}</a></td>
            <td>{{ model.components[comp_name].description if comp_name in model.components else 'N/A' }}</td>
            <td>{{ model.components[comp_name].inBoundary if comp_name in model.components else 'N/A' }}</td>
        </tr>
        {% endfor %}
    </tbody>
</table>
{% else %}
<p>No components affected by this threat.</p>
{% endif %}

<h2>Affected Scenarios</h2>
{% if threat_scenario_data %}
<button onclick="document.querySelectorAll('.scenario-details').forEach(d => d.open = true)">Unfold all</button>
{% for item in threat_scenario_data %}
<details class="scenario-details">
    <summary>
        <a href="scenario_{{ item.scenario.name.replace(' ', '_') }}.html">{{ item.scenario.name }}</a>
        <span class="affected-components-inline">
            — affects:
            {% for comp in item.affected_components %}
            <a href="component_{{ comp | slugify }}.html" class="tag tag--false">{{ comp }}</a>
            {% endfor %}
        </span>
    </summary>
    {% if item.highlighted_dfd %}
    {% with src=item.highlighted_dfd, zoom_style="margin-top: 0.75rem;" %}
        {% include "includes/dfd_diagram.html" %}
    {% endwith %}
    {% else %}
    <p><em>No data flow diagram available for this scenario.</em></p>
    {% endif %}
</details>
{% endfor %}
{% else %}
<p>No scenarios affected by this threat.</p>
{% endif %}

<p><a href="index.html">Back to Summary</a></p>
{% endblock %}

{% block scripts %}
{% set has_dfd = threat_scenario_data | selectattr("highlighted_dfd") | list | length > 0 %}
{% include "includes/diagram_scripts.html" %}
{% endblock %}