fix: correct multi-line record detection in Qualys CSV parser

The previous end-of-record detection incorrectly treated any line ending
with a single quote as a complete record. This caused multi-line records
(where Results field contains embedded newlines) to be split incorrectly.

In Qualys non-standard format, multi-field records always end with """
(the last field's closing "" plus the record's closing "). Single quote
endings within a record are just field content, not record terminators.

Authored by T. Walker - DefectDojo

Author: skywalke34

dojo/tools/qualys_vmdr/helpers.py

@@ -385,7 +385,7 @@ def _parse_nonstandard_content(lines, skip_metadata_lines):
         return []
 
     # Parse data rows - need to handle multi-line records
-    # A row starts with " and ends with "
+    # A row starts with " and ends with """ (last field's "" + record's ")
     rows = []
     current_row = ""
     in_record = False
@@ -403,22 +403,16 @@ def _parse_nonstandard_content(lines, skip_metadata_lines):
                 current_row = line
                 in_record = True
                 # Check if this line also ends the record
-                if line.rstrip().endswith('"') and not line.rstrip().endswith('""'):
-                    # Complete single-line record
-                    rows.append(current_row)
-                    current_row = ""
-                    in_record = False
-                elif line.rstrip().endswith('"""'):
-                    # Ends with "" followed by " - this is end of record
+                # Multi-field records end with """ (last field's "" + record's ")
+                if line.rstrip().endswith('"""'):
                     rows.append(current_row)
                     current_row = ""
                     in_record = False
         else:
             # Continuing a multi-line record
             current_row += "\n" + line
             # Check if this line ends the record
-            stripped_line = line.rstrip()
-            if (stripped_line.endswith('"') and not stripped_line.endswith('""')) or stripped_line.endswith('"""'):
+            if line.rstrip().endswith('"""'):
                 rows.append(current_row)
                 current_row = ""
                 in_record = False