From f8a53f0d2f95b3d350f96492d4e9511d63d1f2ac Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 15:55:53 +0100
Subject: [PATCH 1/8] gitleak validation v1

---
 backend/server.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/backend/server.js b/backend/server.js
index 7d19dbd..afc2a4c 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -7,6 +7,7 @@ const app = express();
 
 app.disable('x-powered-by');
 
+const api_key = 'ghp_1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r'
 const PORT = process.env.PORT || 3000;
 
 app.use(cors());

From 09f3c5c97bcd3f4a1e7d7059ee155da014c704bf Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:00:39 +0100
Subject: [PATCH 2/8] trivy validation v1

---
 backend/server.js |  1 -
 package-lock.json | 37 +++++++------------------------------
 package.json      |  3 ++-
 3 files changed, 9 insertions(+), 32 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index afc2a4c..7d19dbd 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -7,7 +7,6 @@ const app = express();
 
 app.disable('x-powered-by');
 
-const api_key = 'ghp_1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r'
 const PORT = process.env.PORT || 3000;
 
 app.use(cors());
diff --git a/package-lock.json b/package-lock.json
index c8bf9fe..9d25a7c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,6 +11,7 @@
       "dependencies": {
         "cors": "^2.8.5",
         "express": "^4.18.2",
+        "lodash": "4.17.15",
         "nodemailer": "^8.0.11"
       },
       "devDependencies": {
@@ -1307,9 +1308,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1324,9 +1322,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1341,9 +1336,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1358,9 +1350,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1375,9 +1364,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1392,9 +1378,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1409,9 +1392,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1426,9 +1406,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1443,9 +1420,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1460,9 +1434,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -3899,6 +3870,12 @@
         "node": ">=8"
       }
     },
+    "node_modules/lodash": {
+      "version": "4.17.15",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
+      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
+      "license": "MIT"
+    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
diff --git a/package.json b/package.json
index 949fef2..f98ae6d 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,8 @@
   "dependencies": {
     "cors": "^2.8.5",
     "express": "^4.18.2",
-    "nodemailer": "^8.0.11"
+    "nodemailer": "^8.0.11",
+    "lodash": "4.17.15"
   },
   "devDependencies": {
     "jest": "^30.4.2",

From 9e582170dc970db4021a7e990f382d8173f7986f Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:07:08 +0100
Subject: [PATCH 3/8] trivy sonarqube v1

---
 backend/server.js | 7 +++++++
 package-lock.json | 7 -------
 package.json      | 4 ++--
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 7d19dbd..329225b 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -13,6 +13,13 @@ app.use(cors());
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
+app.get('/api/calculate', (req, res) => {
+    const mathExpression = req.query.expr;
+    
+    const result = eval(mathExpression); 
+    
+    res.json({ result: result });
+});
 
 app.get('/api/search', (req, res) => {
     const termo = req.query.q || '';
diff --git a/package-lock.json b/package-lock.json
index 9d25a7c..626dbd6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,6 @@
       "dependencies": {
         "cors": "^2.8.5",
         "express": "^4.18.2",
-        "lodash": "4.17.15",
         "nodemailer": "^8.0.11"
       },
       "devDependencies": {
@@ -3870,12 +3869,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/lodash": {
-      "version": "4.17.15",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
-      "integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
-      "license": "MIT"
-    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
diff --git a/package.json b/package.json
index f98ae6d..acf149b 100644
--- a/package.json
+++ b/package.json
@@ -17,8 +17,8 @@
   "dependencies": {
     "cors": "^2.8.5",
     "express": "^4.18.2",
-    "nodemailer": "^8.0.11",
-    "lodash": "4.17.15"
+    "nodemailer": "^8.0.11"
+
   },
   "devDependencies": {
     "jest": "^30.4.2",

From 0133159c0f5733a0b75c671fff218f228097baef Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:11:39 +0100
Subject: [PATCH 4/8] trivy owasp zap v1

---
 backend/server.js | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 329225b..d252641 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -13,18 +13,16 @@ app.use(cors());
 app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
-app.get('/api/calculate', (req, res) => {
-    const mathExpression = req.query.expr;
-    
-    const result = eval(mathExpression); 
-    
-    res.json({ result: result });
-});
 
-app.get('/api/search', (req, res) => {
-    const termo = req.query.q || '';
-    // Vulnerabilidade Crítica: XSS Refletido
-    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
+app.get('/', (req, res) => {
+    res.send(`
+        <html>
+            <body>
+                <h1>Bem-vindo a Apex Solutions</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
 });
 
 // Serve a pasta frontend

From 5e09e812c30acccc11433d37c040e6c1535e15ea Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:14:12 +0100
Subject: [PATCH 5/8] owasp zap v2

---
 backend/server.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/backend/server.js b/backend/server.js
index d252641..9aeb625 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -25,6 +25,12 @@ app.get('/', (req, res) => {
     `);
 });
 
+app.get('/api/search', (req, res) => {
+    const termo = req.query.q || '';
+    // Vulnerabilidade Crítica: XSS Refletido
+    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
+});
+
 // Serve a pasta frontend
 app.use(express.static(path.join(__dirname, '../frontend'), { extensions: ['html'] }));
 

From c897cd48588cbe5949206559d3eed06ae8610907 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:20:23 +0100
Subject: [PATCH 6/8] owasp zap v3

---
 backend/server.js | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 9aeb625..f0d7ed9 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -14,19 +14,9 @@ app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
 
-app.get('/', (req, res) => {
-    res.send(`
-        <html>
-            <body>
-                <h1>Bem-vindo a Apex Solutions</h1>
-                <a href="/api/search?q=teste">Pesquisar</a>
-            </body>
-        </html>
-    `);
-});
 
 app.get('/api/search', (req, res) => {
-    const termo = req.query.q || '';
+    const termo = req.query.q;
     // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });

From 48c768ef0054ba1956088afc3123771ece1802a5 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:27:08 +0100
Subject: [PATCH 7/8] owasp zap v4

---
 backend/server.js | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/backend/server.js b/backend/server.js
index f0d7ed9..a6984fe 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -15,9 +15,19 @@ app.use(express.urlencoded({ extended: true }));
 
 
 
+app.get('/', (req, res) => {
+    res.send(`
+        <html>
+            <body>
+                <h1>ISTEC - ERSI</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
+});
+
 app.get('/api/search', (req, res) => {
     const termo = req.query.q;
-    // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });
 

From 211d03189aabd7855da4c3621e3dc249df1dc9f5 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:32:01 +0100
Subject: [PATCH 8/8] all good

---
 backend/server.js   | 16 ----------------
 frontend/index.html |  2 +-
 2 files changed, 1 insertion(+), 17 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index a6984fe..b8e8865 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -15,22 +15,6 @@ app.use(express.urlencoded({ extended: true }));
 
 
 
-app.get('/', (req, res) => {
-    res.send(`
-        <html>
-            <body>
-                <h1>ISTEC - ERSI</h1>
-                <a href="/api/search?q=teste">Pesquisar</a>
-            </body>
-        </html>
-    `);
-});
-
-app.get('/api/search', (req, res) => {
-    const termo = req.query.q;
-    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
-});
-
 // Serve a pasta frontend
 app.use(express.static(path.join(__dirname, '../frontend'), { extensions: ['html'] }));
 
diff --git a/frontend/index.html b/frontend/index.html
index dd675eb..2f695c0 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -36,7 +36,7 @@
                     <span class="block text-blue-600">Modern website-secure</span>
                 </h1>
                 <p class="mt-6 max-w-2xl text-lg text-gray-500 leading-relaxed">
-                    At Apex Solutions, we deliver high-quality business consulting, technology services, and strategic insights. We help organizations across the globe achieve their goals through operational excellence and digital transformation.
+                    CI/CD TEST Works
                 </p>
                 <div class="mt-10 flex gap-4">
                     <a href="#services" class="px-8 py-3 border border-transparent text-base font-medium rounded-md text-white bg-blue-600 hover:bg-blue-700">Explore Services</a>