pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

All good v1
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Failing after 10s
Details

Browse Source
This commit is contained in:
pm
2026-06-13 11:36:27 +01:00
parent 76f95077ce
commit 85e6d4b66a
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/server.js
+3 -3
View File
@@ -23,9 +23,9 @@ app.get('/careers', (req, res) => res.sendFile(path.join(__dirname, '../frontend
app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html'))); app.get('/contact', (req, res) => res.sendFile(path.join(__dirname, '../frontend/contact.html')));
// ========================================== // ==========================================
// ROTA VULNERÁVEL (Armadilha infalível para o OWASP ZAP) // VULNERÁVEL (OWASP ZAP)
// ========================================== // ==========================================
app.get('/api/search', (req, res) => { /*app.get('/api/search', (req, res) => {
const termo = req.query.q || ''; const termo = req.query.q || '';
// A vulnerabilidade crítica: devolver o input diretamente no HTML // A vulnerabilidade crítica: devolver o input diretamente no HTML
res.send(` res.send(`
@@ -37,7 +37,7 @@ app.get('/api/search', (req, res) => {
</body> </body>
</html> </html>
`); `);
}); });*/
// Configuração do transporte de E-mail (Mocks de teste vs Produção) // Configuração do transporte de E-mail (Mocks de teste vs Produção)
let transporter; let transporter;
frontend/index.html
+2 -2
View File
@@ -93,12 +93,12 @@
</div> </div>
</div> </div>
</main> </main>
<div style="display: none;"> <!--<div style="display: none;">
<form action="/api/search" method="GET"> <form action="/api/search" method="GET">
<input type="text" name="q" value="teste"> <input type="text" name="q" value="teste">
<button type="submit">Pesquisar</button> <button type="submit">Pesquisar</button>
</form> </form>
</div> </div>-->
<footer class="bg-slate-900 text-slate-400 py-12 text-center"> <footer class="bg-slate-900 text-slate-400 py-12 text-center">
<p>&copy; 2026 Apex Solutions. All rights reserved.</p> <p>&copy; 2026 Apex Solutions. All rights reserved.</p>
</footer> </footer>