feat: refactor reports module to reports_xss, add JSON output support…

… and enhance error handling

.gitignore

@@ -37,5 +37,6 @@ dumpsync1.yml
 # Reports files
 *.csv
 *.pdf
+*.json
 *.html
 *.xlsx

src/plugins/mod.rs

@@ -1,2 +1,2 @@
-pub mod reports;
+pub mod reports_xss;
 pub mod scan_xss;

src/plugins/reports_xss.rs

@@ -0,0 +1,58 @@
+use csv::Writer;
+use std::fs::File;
+use serde::Serialize;
+use std::error::Error;
+use serde_json::to_writer_pretty;
+
+use crate::ui::scan_alerts::ScanAlerts;
+
+#[derive(Serialize)]
+struct Detection {
+    table: String,
+    row_index: usize,
+    column: String,
+    value: String,
+}
+
+pub struct ReportsXSS;
+
+impl ReportsXSS {
+
+    pub fn csv(&self, detections: Vec<(String, usize, String, String)>, output_path: &str) -> Result<(), Box<dyn Error>> {
+        let mut writer = Writer::from_path(output_path)?;
+        writer.write_record(&["Table", "Row Index", "Column", "Value"])?;
+
+        for (table, row_index, column, value) in detections {
+            writer.write_record(&[
+                table,
+                row_index.to_string(),
+                column,
+                value,
+            ])?;
+        }
+
+        writer.flush()?;
+
+        ScanAlerts::reports_generated(output_path);
+        Ok(())
+    }
+
+    pub fn json(&self, detections: Vec<(String, usize, String, String)>, output_path: &str) -> Result<(), Box<dyn Error>> {
+        let detections: Vec<Detection> = detections
+            .into_iter()
+            .map(|(table, row_index, column, value)| Detection {
+                table,
+                row_index,
+                column,
+                value,
+            })
+            .collect();
+
+        let file = File::create(output_path)?;
+        to_writer_pretty(file, &detections)?;
+
+        ScanAlerts::reports_generated(output_path);
+        Ok(())
+    }
+
+}

src/plugins/scan_xss.rs

@@ -10,9 +10,13 @@ use mysql::{
 
 use crate::{
     consts::global::Global, 
-    plugins::reports::Reports, 
-    ui::scan_alerts::ScanAlerts, 
-    engine::connection::Connection, 
+    plugins::reports_xss::ReportsXSS,  
+    engine::connection::Connection,
+
+    ui::{
+        scan_alerts::ScanAlerts,
+        errors_alerts::ErrorsAlerts,
+    },
 
     helpers::{
         scan_handlers::ScanHandlers,
@@ -118,7 +122,13 @@ impl ScanXSS {
         }
 
         if let Some(file) = &self.file {
-            Reports.xss(detections, file)?;
+            if file.ends_with(".csv") {
+                ReportsXSS.csv(detections, file)?;
+            } else if file.ends_with(".json") {
+                ReportsXSS.json(detections, file)?;
+            } else {
+                ErrorsAlerts::report_format();
+            }
         }
 
         Ok(())

src/ui/errors_alerts.rs

@@ -49,4 +49,13 @@ impl ErrorsAlerts {
         );
     }
 
+    pub fn report_format() {
+        let message = "Invalid file format, only CSV and JSON are supported.";
+
+        println!("{}", "-".repeat(50));
+        println!(
+            "{}", message.red().bold(), 
+        );
+    }
+
 }