From f386e25432e795d7209753cf17eb1cf2f60d0850 Mon Sep 17 00:00:00 2001
From: pedro <pedro.maio@each-cs.com>
Date: Tue, 16 Jun 2026 16:28:46 +0100
Subject: [PATCH] All Good

---
 backend/server.js | 17 -----------------
 1 file changed, 17 deletions(-)

diff --git a/backend/server.js b/backend/server.js
index 7a53688..7d19dbd 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -14,23 +14,6 @@ app.use(express.json());
 app.use(express.urlencoded({ extended: true }));
 
 
-// ==========================================
-// ROTA LIMPA (Passa no SonarQube, chumba no ZAP)
-// ==========================================
-
-// Modificamos a rota principal temporariamente para o ZAP encontrar o link e atacar
-app.get('/', (req, res) => {
-    res.send(`
-        <html>
-            <body>
-                <h1>Bem-vindo a Apex Solutions</h1>
-                <a href="/api/search?q=teste">Pesquisar</a>
-            </body>
-        </html>
-    `);
-});
-
-// A rota vulnerável a XSS que o SonarQube (versão gratuita) ignora, mas o ZAP destrói
 app.get('/api/search', (req, res) => {
     const termo = req.query.q || '';
     // Vulnerabilidade Crítica: XSS Refletido