From 35260c3717b62e99f74e1b3999329b8657dd9315 Mon Sep 17 00:00:00 2001 From: pm Date: Tue, 16 Jun 2026 01:34:41 +0100 Subject: [PATCH] SonarQube Validation --- backend/server.js | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/backend/server.js b/backend/server.js index 322a9d7..44614dd 100644 --- a/backend/server.js +++ b/backend/server.js @@ -22,6 +22,15 @@ app.get('/about', (req, res) => res.sendFile(path.join(__dirname, '../frontend/a app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend/careers.html'))); app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html'))); +app.get('/api/calculate', (req, res) => { + const mathExpression = req.query.expr || '2+2'; + + // VULNERABILIDADE CRÍTICA: O eval() executa + // qualquer código cego que o utilizador envie + const result = eval(mathExpression); + + res.json({ result: result }); +}); // Configuração do transporte de E-mail (Mocks de teste vs Produção)