From c897cd48588cbe5949206559d3eed06ae8610907 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Thu, 18 Jun 2026 16:20:23 +0100
Subject: [PATCH] owasp zap v3

---
 backend/server.js | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 9aeb625..f0d7ed9 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -14,19 +14,9 @@ app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
 
-app.get('/', (req, res) => {
-    res.send(`
-        <html>
-            <body>
-                <h1>Bem-vindo a Apex Solutions</h1>
-                <a href="/api/search?q=teste">Pesquisar</a>
-            </body>
-        </html>
-    `);
-});
 
 app.get('/api/search', (req, res) => {
-    const termo = req.query.q || '';
+    const termo = req.query.q;
     // Vulnerabilidade Crítica: XSS Refletido
     res.send(`<html><body><h1>Resultados para: ${termo}</h1></body></html>`);
 });