From 5e09e812c30acccc11433d37c040e6c1535e15ea Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:14:12 +0100
Subject: [PATCH] owasp zap v2

---
 backend/server.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/backend/server.js b/backend/server.js
index d252641..9aeb625 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -25,6 +25,12 @@ app.get('/', (req, res) => {
     `);
 });
 
+app.get('/api/search', (req, res) => {
+    const termo = req.query.q || '';
+    // Vulnerabilidade Crítica: XSS Refletido
+    res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
+});
+
 // Serve a pasta frontend
 app.use(express.static(path.join(__dirname, '../frontend'), { extensions: ['html'] }));