Files
tk-factory-services/system3-nonconformance/web/reports.html
Hyungi Ahn 12367dd3a1 fix(security): 전체 서비스 보안 점검 — XSS·인가·토큰·헤더·에러마스킹 일괄 수정
Phase 1 CRITICAL XSS:
- marked.parse() → DOMPurify.sanitize() (system3 ai-assistant, issues-management)
- toast innerHTML에 escapeHtml 적용 (system1 api-base, system3 common-header)
- onclick 핸들러 → data 속성 + addEventListener (system2 issue-detail)

Phase 2 HIGH 인가:
- getUserBalance 본인확인 추가 (tksupport vacationController)

Phase 3 HIGH 토큰+CSP:
- localStorage 토큰 저장 제거 — 쿠키 전용 (7개 서비스)
- unsafe-eval CSP 제거 (system1 security.js)

Phase 4 MEDIUM:
- nginx 보안 헤더 추가 (8개 서비스)
- 500 에러 메시지 마스킹 (5개 API)
- path traversal 방지 (system3 file_service.py)
- cookie fallback 데드코드 제거 (4개 auth.js)
- /login/form rate limiting 추가 (sso-auth)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 19:50:00 +09:00

213 lines
9.6 KiB
HTML

<!DOCTYPE html>
<html lang="ko">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>보고서 - 작업보고서</title>
<!-- Tailwind CSS -->
<script src="https://cdn.tailwindcss.com"></script>
<!-- Font Awesome -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<!-- Custom Styles -->
<style>
@import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap');
body {
font-family: 'Inter', sans-serif;
}
.report-card {
transition: all 0.3s ease;
border-left: 4px solid transparent;
}
.report-card:hover {
transform: translateY(-4px);
box-shadow: 0 12px 30px rgba(0, 0, 0, 0.15);
border-left-color: #3b82f6;
}
.report-card.daily-report {
border-left-color: #10b981;
}
.report-card.daily-report:hover {
border-left-color: #059669;
}
.gradient-bg {
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
}
.stats-card {
background: linear-gradient(135deg, #f093fb 0%, #f5576c 100%);
}
</style>
</head>
<body class="bg-gray-50">
<!-- 공통 헤더 -->
<div id="commonHeader"></div>
<!-- Main Content -->
<main class="container mx-auto px-4 py-8" style="padding-top: 80px;">
<!-- 페이지 헤더 -->
<div class="bg-white rounded-xl shadow-sm p-6 mb-6">
<div class="flex items-center justify-between mb-4">
<div>
<h1 class="text-2xl font-bold text-gray-900 flex items-center">
<i class="fas fa-chart-bar text-red-500 mr-3"></i>
보고서
</h1>
<p class="text-gray-600 mt-1">다양한 보고서를 생성하고 관리할 수 있습니다</p>
</div>
</div>
</div>
<!-- 보고서 카테고리 -->
<div class="bg-white rounded-xl shadow-sm p-6 mb-6">
<h2 class="text-xl font-semibold text-gray-900 mb-4">
<i class="fas fa-list text-gray-500 mr-2"></i>보고서 유형 선택
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
<!-- 일일보고서 -->
<a href="/reports-daily.html" class="report-card bg-green-50 p-4 rounded-lg hover:bg-green-100 transition-colors">
<div class="flex items-center justify-between mb-3">
<div class="w-10 h-10 bg-green-100 rounded-lg flex items-center justify-center">
<i class="fas fa-file-excel text-green-600"></i>
</div>
<span class="bg-green-100 text-green-800 text-xs font-medium px-2 py-1 rounded-full">
사용 가능
</span>
</div>
<h3 class="text-lg font-semibold text-gray-900 mb-2">일일보고서</h3>
<p class="text-sm text-gray-600 mb-3">
관리함 데이터를 기반으로 품질팀용 일일보고서를 엑셀 형태로 생성합니다.
</p>
<div class="flex items-center justify-between">
<span class="text-xs text-green-600 font-medium">
<i class="fas fa-check-circle mr-1"></i>진행중 항목 포함
</span>
<i class="fas fa-arrow-right text-gray-400"></i>
</div>
</a>
<!-- 주간보고서 -->
<a href="/reports-weekly.html" class="report-card bg-blue-50 p-4 rounded-lg hover:bg-blue-100 transition-colors">
<div class="flex items-center justify-between mb-3">
<div class="w-10 h-10 bg-blue-100 rounded-lg flex items-center justify-center">
<i class="fas fa-calendar-week text-blue-600"></i>
</div>
<span class="bg-yellow-100 text-yellow-800 text-xs font-medium px-2 py-1 rounded-full">
준비중
</span>
</div>
<h3 class="text-lg font-semibold text-gray-900 mb-2">주간보고서</h3>
<p class="text-sm text-gray-600 mb-3">
주간 단위로 집계된 부적합 현황 및 처리 결과를 정리한 보고서입니다.
</p>
<div class="flex items-center justify-between">
<span class="text-xs text-blue-600 font-medium">
<i class="fas fa-calendar mr-1"></i>주간 집계
</span>
<i class="fas fa-arrow-right text-gray-400"></i>
</div>
</a>
<!-- 월간보고서 -->
<a href="/reports-monthly.html" class="report-card bg-purple-50 p-4 rounded-lg hover:bg-purple-100 transition-colors">
<div class="flex items-center justify-between mb-3">
<div class="w-10 h-10 bg-purple-100 rounded-lg flex items-center justify-center">
<i class="fas fa-calendar-alt text-purple-600"></i>
</div>
<span class="bg-yellow-100 text-yellow-800 text-xs font-medium px-2 py-1 rounded-full">
준비중
</span>
</div>
<h3 class="text-lg font-semibold text-gray-900 mb-2">월간보고서</h3>
<p class="text-sm text-gray-600 mb-3">
월간 부적합 발생 현황, 처리 성과 및 개선사항을 종합한 보고서입니다.
</p>
<div class="flex items-center justify-between">
<span class="text-xs text-purple-600 font-medium">
<i class="fas fa-chart-line mr-1"></i>월간 분석
</span>
<i class="fas fa-arrow-right text-gray-400"></i>
</div>
</a>
</div>
</div>
<!-- 보고서 안내 -->
<div class="bg-white rounded-xl shadow-sm p-6">
<h2 class="text-xl font-semibold text-gray-900 mb-4">
<i class="fas fa-info-circle text-blue-500 mr-2"></i>보고서 이용 안내
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div class="space-y-3">
<h3 class="font-semibold text-gray-800">📊 일일보고서</h3>
<ul class="text-sm text-gray-600 space-y-1">
<li>• 관리함의 진행 중 항목 무조건 포함</li>
<li>• 완료됨 항목은 첫 내보내기에만 포함</li>
<li>• 프로젝트별 개별 생성</li>
<li>• 엑셀 형태로 다운로드</li>
</ul>
</div>
<div class="space-y-3">
<h3 class="font-semibold text-gray-800">🚀 향후 계획</h3>
<ul class="text-sm text-gray-600 space-y-1">
<li>• 주간보고서: 주간 집계 및 트렌드 분석</li>
<li>• 월간보고서: 월간 성과 및 개선사항</li>
<li>• 자동 이메일 발송 기능</li>
<li>• 대시보드 형태의 실시간 리포트</li>
</ul>
</div>
</div>
</div>
</main>
<!-- JavaScript -->
<script src="/static/js/core/permissions.js?v=20260308"></script>
<script src="/static/js/components/common-header.js?v=20260313"></script>
<script src="/static/js/api.js?v=20260308"></script>
<script src="/static/js/core/auth-manager.js?v=20260313"></script>
<script>
// 페이지 초기화
document.addEventListener('DOMContentLoaded', function() {
console.log('보고서 메인 페이지 로드 시작');
// AuthManager 로드 대기
const checkAuthManager = async () => {
if (window.authManager) {
try {
// 인증 확인
const isAuthenticated = await window.authManager.checkAuth();
if (!isAuthenticated) {
window.location.href = '/login.html';
return;
}
// 공통 헤더 초기화
const user = JSON.parse(localStorage.getItem('currentUser') || '{}');
if (window.commonHeader && user.id) {
await window.commonHeader.init(user, 'reports');
}
console.log('보고서 메인 페이지 로드 완료');
} catch (error) {
console.error('페이지 초기화 오류:', error);
}
} else {
setTimeout(checkAuthManager, 100);
}
};
checkAuthManager();
});
</script>
</body>
</html>