Function analyze_website_headers has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def analyze_website_headers(endpoint_id: int, url: int, protocol: str, headers: Dict[str, str]):
    """
    #125: CSP can replace X-XSS-Protection and X-Frame-Options. Thus if a (more modern) CSP header is present, assume
    that decisions have been made about what's in it and ignore the previously mentioned headers.

• Read up
  Read up

Function add_subdomain has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

    def add_subdomain(self, subdomain, internal_notes: str = ""):
        # import here to prevent circular/cyclic imports, this module imports Url.
        from websecmap.scanners.scanner.http import resolves

        if not subdomain:

• Read up
  Read up

Function status has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def status():
    """Return a dictionary with the status of the Celery task processing system."""
    inspect = app.control.inspect()

    # query workforce statistics using control.inspect API and extract some relevant data from it

• Read up
  Read up

Avoid deeply nested control flow statements.

Open

                    if not already_in_overview(overview, scanner_id, activity, state):
                        overview.append({"scanner": scanner_id, "activity": activity, "state": state, "amount": 0})

    # Sort by scanner for easier human comprehension.
    overview = sorted(overview, key=lambda o: (o["scanner"], o["activity"], o["state"]))

Function make_new_feature has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def make_new_feature(organization, scan):
    # log.debug('Making new feature %s, with scan %s' % (organization, scan))

    calculation = get_severity(scan)
    color = (

• Read up
  Read up

Function geolocate_organizations has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def geolocate_organizations(organizations: List):

    # read out once, to prevent a database query every time the variable is needed.
    # note: geocoding costs money(!)
    gmaps = googlemaps.Client(key=config.GOOGLE_MAPS_API_KEY)

• Read up
  Read up

Function count_queries has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def count_queries(message: str = ""):
    """
    Helps figuring out if django is silently adding more queries / slows things down. Happens when you're
    asking for a property that was not in the original query.

• Read up
  Read up

Function connect_result has 6 arguments (exceeds 4 allowed). Consider refactoring.

Open

def connect_result(result, protocol: str, url_id: int, port: int, ip_version: int, origin: str = ""):

Function compose_scan_task has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def compose_scan_task(urls):
    tasks = []
    for url in urls:
        complete_endpoints, incomplete_endpoints = get_endpoints_with_missing_encryption(url)

• Read up
  Read up

Function certificate_chain_ends_on_non_trusted_dutch_root_ca has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def certificate_chain_ends_on_non_trusted_dutch_root_ca(serialized_certificates: List[str]) -> bool:
    # todo: there are more untrusted certificates from the dutch state.
    # Example: https://secure-t.sittard-geleen.nl
    # https://www.pyopenssl.org/en/stable/api/crypto.html
    if not serialized_certificates:

• Read up
  Read up

Function get_queryset has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

    def get_queryset(self):

        qs = Organization.objects.all().filter(is_dead=False).order_by(Lower("name"))

        organization_type = self.forwarded.get("organization_type_name", None)

• Read up
  Read up

Function handle has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

    def handle(self, *args, **options):

        try:
            if options["id"]:
                for id in options["id"]:

• Read up
  Read up

Function add_proxies has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def add_proxies(proxies: str):

    # urls is basically garbage input on multiple lines with spaces and comma's and all kinds of unicode.
    # here we try to break up this garbage into small pieces text, some are a url, some are garbage...
    proxies = proxies.replace(",", " ")

• Read up
  Read up

Avoid deeply nested control flow statements.

Open

                    for endpoint in urlrating["endpoints"]:

                        for rating in endpoint["ratings"]:
                            if rating["type"] not in measurement:
                                measurement[rating["type"]] = {

Avoid deeply nested control flow statements.

Open

                    if url["url"] in noduplicates:
                        continue
                    noduplicates.append(url["url"])

Function add_configuration has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.

Open

def add_configuration(country: str, organization_type: int):

    if models.Configuration.objects.all().filter(country=country, organization_type=organization_type).exists():
        log.debug("This configuration already exists, skipping.")
        return

• Read up
  Read up

Avoid deeply nested control flow statements.

Open

                    for rating in urlrating["ratings"]:

                        # log.debug("- type: %s H: %s, M: %s, L: %s" %
                        #     (rating['type'], rating['high'], rating['medium'], rating['low']))

Avoid deeply nested control flow statements.

Open

                    if scan_type in ENDPOINT_SCAN_TYPES:
                        vs.ok = measurement[scan_type]["ok_endpoints"]
                    elif scan_type in URL_SCAN_TYPES:
                        vs.ok = measurement[scan_type]["ok_urls"]
                    else:

Avoid deeply nested control flow statements.

Open

                    if endpoint_scan_type not in given_ratings[label]:
                        calculations.append(get_severity(these_endpoint_scans[endpoint_scan_type]))

                        given_ratings[label].append(endpoint_scan_type)
                    else:

Avoid deeply nested control flow statements.

Open

                    if urlrating["url"] in processed_urls:
                        # log.debug("Removed url because it's already in the report: %s" % urlrating["url"])
                        continue