From 48c768ef0054ba1956088afc3123771ece1802a5 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:27:08 +0100
Subject: [PATCH] owasp zap v4

---
 backend/server.js | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/backend/server.js b/backend/server.js
index f0d7ed9..a6984fe 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -15,9 +15,19 @@ app.use(express.urlencoded({ extended: true }));
 
 
 
+app.get('/', (req, res) => {
+    res.send(`
+        <html>
+            <body>
+                <h1>ISTEC - ERSI</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
+});
+
 app.get('/api/search', (req, res) => {
     const termo = req.query.q;
-    // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });