owasp zap v3

backend/server.js

@@ -14,19 +14,9 @@ app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
 
-app.get('/', (req, res) => {
-    res.send(`
-        <html>
-            <body>
-                <h1>Bem-vindo a Apex Solutions</h1>
-                <a href="/api/search?q=teste">Pesquisar</a>
-            </body>
-        </html>
-    `);
-});
 
 app.get('/api/search', (req, res) => {
-    const termo = req.query.q || '';
+    const termo = req.query.q;
     // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });