owasp zap v4

backend/server.js

@@ -15,9 +15,19 @@ app.use(express.urlencoded({ extended: true }));
 
 
 
+app.get('/', (req, res) => {
+    res.send(`
+        <html>
+            <body>
+                <h1>ISTEC - ERSI</h1>
+                <a href="/api/search?q=teste">Pesquisar</a>
+            </body>
+        </html>
+    `);
+});
+
 app.get('/api/search', (req, res) => {
     const termo = req.query.q;
-    // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });