pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SonarQube Validation v5
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Failing after 10s
Details

Browse Source
This commit is contained in:
pm
2026-06-16 01:14:24 +01:00
parent 414ebd29ad
commit 5929b935c1
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/core.test.js
+2 -2
View File
@@ -37,7 +37,7 @@ describe('Enterprise Application Flow & API Validation', () => {
}); });
// OWASP ZAP (/api/search) // OWASP ZAP (/api/search)
it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => { /* it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
const maliciousPayload = '<script>alert("ZAP")</script>'; const maliciousPayload = '<script>alert("ZAP")</script>';
const response = await request(app).get(`/api/search?q=${maliciousPayload}`); const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -45,7 +45,7 @@ describe('Enterprise Application Flow & API Validation', () => {
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade) // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`); expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
}); });
}); });*/
// ========================================== // ==========================================
// 2. API BUSINESS LOGIC & VALIDATION TESTS // 2. API BUSINESS LOGIC & VALIDATION TESTS