From 85e6d4b66a21ba85dc3c09c25bb191700cc47728 Mon Sep 17 00:00:00 2001
From: pm <pedro.maio@each-cs.com>
Date: Sat, 13 Jun 2026 11:36:27 +0100
Subject: [PATCH] All good v1

---
 backend/server.js   | 6 +++---
 frontend/index.html | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 756a699..51387fd 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -23,9 +23,9 @@ app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend
 app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html')));
 
 // ==========================================
-// ROTA VULNERÁVEL (Armadilha infalível para o OWASP ZAP)
+// VULNERÁVEL (OWASP ZAP)
 // ==========================================
-app.get('/api/search', (req, res) => {
+/*app.get('/api/search', (req, res) => {
     const termo = req.query.q || '';
     // A vulnerabilidade crítica: devolver o input diretamente no HTML
     res.send(`
@@ -37,7 +37,7 @@ app.get('/api/search', (req, res) => {
             </body>
         </html>
     `);
-});
+});*/
 
 // Configuração do transporte de E-mail (Mocks de teste vs Produção)
 let transporter;
diff --git a/frontend/index.html b/frontend/index.html
index c2469ae..1d566d0 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -93,12 +93,12 @@
             </div>
         </div>
     </main>
-<div style="display: none;">
+    <!--<div style="display: none;">
         <form action="/api/search" method="GET">
             <input type="text" name="q" value="teste">
             <button type="submit">Pesquisar</button>
         </form>
-    </div>
+    </div>-->
     <footer class="bg-slate-900 text-slate-400 py-12 text-center">
         <p>&copy; 2026 Apex Solutions. All rights reserved.</p>
     </footer>