[Update] save vuln report logic

addon/nonce_check.py

@@ -1,10 +1,8 @@
 import jwt
 from urllib.parse import urlparse, parse_qs
 from typing import Union
-import httpx
 
-import lib.cur_target_url as cur_target_url
-from lib.report_vuln import save_report
+from lib.report_vuln import report_vuln
 
 class NonceChecker:
     def is_oidc_flow(self, flow) -> bool:
@@ -72,17 +70,13 @@ class NonceChecker:
     def check_nonce_in_id_token(self, flow, id_token: str) -> bool:
         decoded = self.decode_id_token(id_token)
         nonce = decoded.get("nonce")
-        req = flow.request
-        url = req.pretty_url
         if not nonce:
-            report_data = [{
-                'target': cur_target_url.load(),
-                'status': "CRITICAL",
-                'title': "nonce is missing in id_token",
-                'description': "Nonce is present in the request but missing in the id_token.",
-                'uri': f"Original: {url}\nDecoded ID Token: {decoded}",
-            }]
-            save_report(report_data)
+            report_vuln(
+                title="Nonce Check Failed",
+                desc="id_token에 nonce가 없습니다.",
+                status="HIGH",
+                uri=flow.request.url
+            )
             return False
         else:
             return True