Phillip Tarrant
55cd81aec0
- engine: add analyse_text() to extract visible page text and evaluate
category="text" rules; collect matched phrases and expose as
`content_snippet` (deduped, length-capped via settings.ui.snippet_preview_len).
- engine: removed unused code
- browser: removed double call for enrichment
- engine: improve regex compilation — honor per-rule flags (string or list)
and default IGNORECASE when category=="text".
- engine: add dispatch logging "[engine] applying categories: …" gated by
settings.app.print_rule_dispatch.
- ui(templates): add `templates/partials/result_text.html` mirroring the forms
table; renders page-level records and their matched rules.
- ui(controller): wire `analyse_text()` into scan path and expose
`payload["suspicious_text"]`.
- rules(text): add `identity_verification_prompt`, `gated_document_access`,
`email_collection_prompt`; broaden `credential_reset`.
fix: text indicators were not displayed due to missing analyzer and mismatched result shape.
Result shape:
suspicious_text: [
{
"type": "page",
"content_snippet": "...matched phrases…",
"rules": [
{"name": "...", "description": "...", "severity": "medium", "tags": ["..."]}
]
}
]
61 lines
1.9 KiB
Python
61 lines
1.9 KiB
Python
import os
|
|
import logging
|
|
from pathlib import Path
|
|
from flask import Flask
|
|
|
|
# Local imports
|
|
from app.utils.settings import get_settings
|
|
from app.logging_setup import wire_logging_once, get_app_logger
|
|
|
|
from app.blueprints.main import bp as main_bp # ui blueprint
|
|
from app.blueprints.api import api_bp as api_bp # api blueprint
|
|
from app.blueprints.roadmap import bp as roadmap_bp # roadmap
|
|
|
|
def create_app() -> Flask:
|
|
"""
|
|
Create and configure the Flask application instance.
|
|
|
|
Returns:
|
|
Flask: The configured Flask app.
|
|
"""
|
|
# Basic app object
|
|
app = Flask(__name__, template_folder="templates", static_folder="static")
|
|
|
|
# logging setup
|
|
wire_logging_once(app)
|
|
|
|
app_logger = get_app_logger()
|
|
|
|
# Load settings (safe fallback to defaults if file missing)
|
|
settings = get_settings()
|
|
|
|
# Secret key loaded from env (warn if missing)
|
|
app.secret_key = os.getenv("SECRET_KEY")
|
|
if not app.secret_key:
|
|
app_logger.warning("[init] SECRET_KEY is not set; sessions may be insecure in production.")
|
|
|
|
# Configure storage directory (bind-mount is still handled by sandbox.sh)
|
|
sandbox_storage_default = Path("/data")
|
|
app.config["SANDBOX_STORAGE"] = str(sandbox_storage_default)
|
|
|
|
# App metadata available to templates
|
|
app.config["APP_NAME"] = settings.app.name
|
|
app.config["APP_VERSION"] = f"v{settings.app.version_major}.{settings.app.version_minor}"
|
|
|
|
# roadmap file
|
|
app.config["ROADMAP_FILE"] = str(Path(app.root_path) / "docs" / "roadmap.yaml")
|
|
|
|
|
|
# Register blueprints
|
|
app.register_blueprint(main_bp)
|
|
app.register_blueprint(api_bp)
|
|
app.register_blueprint(roadmap_bp)
|
|
|
|
app_logger = get_app_logger()
|
|
|
|
# Example log lines so we know we booted cleanly
|
|
app_logger.info(f"SneakyScope started: {app.config['APP_NAME']} {app.config['APP_VERSION']}")
|
|
app_logger.info(f"SANDBOX_STORAGE: {app.config['SANDBOX_STORAGE']}")
|
|
|
|
return app
|