pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SonarQube Validation
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Failing after 46s
Details

Browse Source
This commit is contained in:
pm
2026-06-16 01:34:41 +01:00
parent a6a7f3b0b5
commit 35260c3717
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/server.js
+9
View File
@@ -22,6 +22,15 @@ app.get('/about', (req, res) => res.sendFile(path.join(__dirname, '../frontend/a
app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend/careers.html'))); app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend/careers.html')));
app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html'))); app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html')));
app.get('/api/calculate', (req, res) => {
const mathExpression = req.query.expr || '2+2';
// VULNERABILIDADE CRÍTICA: O eval() executa
// qualquer código cego que o utilizador envie
const result = eval(mathExpression);
res.json({ result: result });
});
// Configuração do transporte de E-mail (Mocks de teste vs Produção) // Configuração do transporte de E-mail (Mocks de teste vs Produção)