pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SonarQube Validation v2
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Failing after 9s
Details

Browse Source
This commit is contained in:
pm
2026-06-16 00:42:29 +01:00
parent fd94417c8d
commit e9e243ee42
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/core.test.js
+2 -2
View File
@@ -36,7 +36,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(404); expect(response.status).toBe(404);
}); });
/*// OWASP ZAP (/api/search) // OWASP ZAP (/api/search)
it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => { it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
const maliciousPayload = '<script>alert("ZAP")</script>'; const maliciousPayload = '<script>alert("ZAP")</script>';
const response = await request(app).get(`/api/search?q=${maliciousPayload}`); const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -44,7 +44,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(200); expect(response.status).toBe(200);
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade) // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`); expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
});*/ });
}); });
// ========================================== // ==========================================