trivy owasp zap v1

backend/server.js

@@ -13,18 +13,16 @@ app.use(cors());
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
-app.get('/api/calculate', (req, res) => {
-    const mathExpression = req.query.expr;
-    
-    const result = eval(mathExpression); 
-    
-    res.json({ result: result });
-});
 
-app.get('/api/search', (req, res) => {
+app.get('/', (req, res) => {
-    const termo = req.query.q || '';
+    res.send(`
-    // Vulnerabilidade Crítica: XSS Refletido
+        <html>
-    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
+            <body>
+                <h1>Bem-vindo a Apex Solutions</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
 });
 
 // Serve a pasta frontend