tests/core.test.js

@@ -37,7 +37,7 @@ describe('Enterprise Application Flow & API Validation', () => {
         });
 
         //  OWASP ZAP (/api/search)
-        it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
+       /* it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
             const maliciousPayload = '<script>alert("ZAP")</script>';
             const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
             
@@ -45,7 +45,7 @@ describe('Enterprise Application Flow & API Validation', () => {
             // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
             expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
         });
-    });
+    });*/
 
     // ==========================================
     // 2. API BUSINESS LOGIC & VALIDATION TESTS