icookforms 0.1.0

The World's Reference Cookie Audit Software - Complete Security & Compliance Analysis
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

//! Compliance checking for cookies

use crate::types::{ComplianceIssue, Cookie, Regulation, Severity};

/// Check cookie compliance with a regulation
#[must_use]
pub fn check_compliance(cookie: &Cookie, regulation: Regulation) -> Vec<ComplianceIssue> {
    let mut issues = Vec::new();

    match regulation {
        Regulation::GDPR | Regulation::UKGDPR => {
            issues.extend(check_gdpr_compliance(cookie));
        }
        Regulation::CCPA | Regulation::CPRA => {
            issues.extend(check_ccpa_compliance(cookie));
        }
        _ => {
            // Other regulations - basic check
            if !cookie.secure {
                issues.push(ComplianceIssue::new(
                    Severity::Medium,
                    regulation,
                    "Missing Secure Flag",
                    format!("Cookie '{}' should use Secure flag", cookie.name),
                    "Cookies should be transmitted securely",
                ));
            }
        }
    }

    issues
}

/// Check GDPR compliance
fn check_gdpr_compliance(cookie: &Cookie) -> Vec<ComplianceIssue> {
    let mut issues = Vec::new();

    // GDPR requires explicit consent for non-essential cookies
    if !cookie.secure || !cookie.http_only {
        issues.push(
            ComplianceIssue::new(
                Severity::High,
                Regulation::GDPR,
                "GDPR Compliance Issue",
                format!(
                    "Cookie '{}' may not meet GDPR security requirements",
                    cookie.name
                ),
                "Article 5(1)(f) - Security of processing",
            )
            .with_article("Art. 5(1)(f)")
            .with_penalty("Up to €20M or 4% of annual global revenue"),
        );
    }

    issues
}

/// Check CCPA compliance
fn check_ccpa_compliance(cookie: &Cookie) -> Vec<ComplianceIssue> {
    let mut issues = Vec::new();

    // CCPA opt-out requirement for sale of personal information
    if cookie.is_third_party {
        issues.push(ComplianceIssue::new(
            Severity::Medium,
            Regulation::CCPA,
            "Third-Party Cookie",
            format!(
                "Third-party cookie '{}' may require opt-out mechanism",
                cookie.name
            ),
            "CCPA Section 1798.120 - Right to opt-out of sale",
        ));
    }

    issues
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_gdpr_compliance() {
        let cookie = Cookie::new("test".to_string(), "value".to_string());
        let issues = check_compliance(&cookie, Regulation::GDPR);

        assert!(!issues.is_empty());
    }
}