diff --git a/tests/core.test.js b/tests/core.test.js
index be55452..31446fb 100644
--- a/tests/core.test.js
+++ b/tests/core.test.js
@@ -36,7 +36,7 @@ describe('Enterprise Application Flow & API Validation', () => {
             expect(response.status).toBe(404);
         });
 
-        // NOVO TESTE: Valida a nossa armadilha para o OWASP ZAP (corrigido para /api/search)
+        /*//  OWASP ZAP (/api/search)
         it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
             const maliciousPayload = '<script>alert("ZAP")</script>';
             const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -44,7 +44,7 @@ describe('Enterprise Application Flow & API Validation', () => {
             expect(response.status).toBe(200);
             // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
             expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
-        });
+        });*/
     });
 
     // ==========================================