pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

All good v2
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s
Details

Browse Source
This commit is contained in:
pm
2026-06-13 11:39:16 +01:00
parent 85e6d4b66a
commit 8ed247f3c3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/core.test.js
+2 -2
View File
@@ -36,7 +36,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(404); expect(response.status).toBe(404);
}); });
// NOVO TESTE: Valida a nossa armadilha para o OWASP ZAP (corrigido para /api/search) /*// OWASP ZAP (/api/search)
it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => { it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
const maliciousPayload = '<script>alert("ZAP")</script>'; const maliciousPayload = '<script>alert("ZAP")</script>';
const response = await request(app).get(`/api/search?q=${maliciousPayload}`); const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -44,7 +44,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(200); expect(response.status).toBe(200);
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade) // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`); expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
}); });*/
}); });
// ========================================== // ==========================================