From 0133159c0f5733a0b75c671fff218f228097baef Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:11:39 +0100
Subject: [PATCH] trivy owasp zap v1

---
 backend/server.js | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 329225b..d252641 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -13,18 +13,16 @@ app.use(cors());
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
-app.get('/api/calculate', (req, res) => {
-    const mathExpression = req.query.expr;
-    
-    const result = eval(mathExpression); 
-    
-    res.json({ result: result });
-});
 
-app.get('/api/search', (req, res) => {
-    const termo = req.query.q || '';
-    // Vulnerabilidade Crítica: XSS Refletido
-    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
+app.get('/', (req, res) => {
+    res.send(`
+        <html>
+            <body>
+                <h1>Bem-vindo a Apex Solutions</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
 });
 
 // Serve a pasta frontend