{% extends "base.html" %}
{% block title %}Web Protection · SD RMM{% endblock %}
{% block content %}
<style>
  .us-wrap { max-width:920px; }
  .us-intro { font-size:13.5px; color:#aab0bb; line-height:1.6; margin:0 0 16px; }
  .us-intro .tag { font-size:11px; }
  .us-form textarea { width:100%; box-sizing:border-box; min-height:120px; background:#0b0e14; border:1px solid #2a2f3a; border-radius:9px; padding:11px 13px; color:#e6e8eb; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:13px; resize:vertical; }
  .us-form textarea:focus { outline:none; border-color:#3b82f6; }
  .us-actions { display:flex; align-items:center; gap:14px; margin:10px 0 0; }
  .us-actions .hint { font-size:12px; color:#6b7280; }
  .us-summary { display:flex; gap:10px; margin:20px 0 12px; flex-wrap:wrap; }
  .pill { border-radius:10px; padding:8px 14px; font-size:13px; border:1px solid #2a2f3a; background:#161a22; }
  .pill b { font-size:16px; display:block; }
  .pill.bad b  { color:#fca5a5; }
  .pill.good b { color:#6ee7b7; }
  table.us { width:100%; border-collapse:collapse; margin-top:6px; font-size:13px; }
  table.us th, table.us td { text-align:left; padding:9px 10px; border-bottom:1px solid #1f242e; vertical-align:top; }
  table.us th { color:#8b93a1; font-weight:600; font-size:12px; text-transform:uppercase; letter-spacing:.03em; }
  table.us td.url { font-family:ui-monospace,Menlo,Consolas,monospace; font-size:12.5px; word-break:break-all; max-width:380px; }
  .verdict { display:inline-block; border-radius:999px; padding:2px 10px; font-size:11px; font-weight:700; white-space:nowrap; }
  .verdict.bad  { background:rgba(249,115,115,.16); color:#fca5a5; }
  .verdict.warn { background:rgba(251,191,36,.16); color:#fcd34d; }
  .verdict.good { background:rgba(52,211,153,.14); color:#6ee7b7; }
  .pill.warn { color:#fcd34d; }
  .muted { color:#6b7280; }
</style>

<div class="us-wrap">
  <h1>Web Protection</h1>
  <p class="us-intro">Check URLs or domains against the live threat-intelligence feed
     &mdash; the same engine the agents use at navigation time.
     <span class="tag">{{ "{:,}".format(ioc_total) }} indicators loaded</span></p>

  <form class="us-form" method="post" action="/tools/urlscan">
    <textarea name="urls" placeholder="One URL or domain per line (or comma/space separated). Up to 50 at a time.
example.com
https://suspicious-site.tld/login">{{ raw|e }}</textarea>
    <div class="us-actions">
      <button type="submit" class="btn">Scan</button>
      <span class="hint">Public teaser version (single URL, no login) lives at <a href="/scan">/scan</a>.</span>
    </div>
  </form>

  {% if summary %}
  <div class="us-summary">
    <div class="pill"><b>{{ summary.checked }}</b> checked</div>
    <div class="pill bad"><b>{{ summary.blocked }}</b> flagged</div>
    <div class="pill warn"><b>{{ summary.suspicious }}</b> suspicious</div>
    <div class="pill good"><b>{{ summary.clean }}</b> clean</div>
  </div>

  {% if results %}
  <table class="us">
    <thead><tr><th>URL / domain</th><th>Verdict</th><th>Matched on</th><th>Source</th><th>Family</th></tr></thead>
    <tbody>
    {% for r in results %}
      <tr>
        <td class="url">{{ r.url|e }}</td>
        <td>{% if r.blocked %}<span class="verdict bad">BLOCKED</span>{% elif r.suspicious %}<span class="verdict warn">SUSPICIOUS</span>{% else %}<span class="verdict good">clean</span>{% endif %}</td>
        <td class="muted">{% if r.blocked %}{{ r.reason or '—' }}{% elif r.suspicious %}{{ r.findings|join('; ') }}{% else %}—{% endif %}</td>
        <td class="muted">{{ r.source or '—' }}</td>
        <td class="muted">{{ r.family or '—' }}</td>
      </tr>
    {% endfor %}
    </tbody>
  </table>
  {% else %}
  <p class="muted">No valid URLs in that input.</p>
  {% endif %}
  {% endif %}
</div>
{% endblock %}