pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Gitleaks Validation #25

Merged
pm merged 18 commits from validation_stage into main 2026-06-16 15:34:30 +00:00
Conversation 0 Commits 18 Files Changed 3
+2 -2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit e9e243ee42 - Show all commits
tests/core.test.js
+2 -2
View File
@@ -36,7 +36,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(404); expect(response.status).toBe(404);
}); });
/*// OWASP ZAP (/api/search) // OWASP ZAP (/api/search)
it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => { it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
const maliciousPayload = '<script>alert("ZAP")</script>'; const maliciousPayload = '<script>alert("ZAP")</script>';
const response = await request(app).get(`/api/search?q=${maliciousPayload}`); const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -44,7 +44,7 @@ describe('Enterprise Application Flow & API Validation', () => {
expect(response.status).toBe(200); expect(response.status).toBe(200);
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade) // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`); expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
});*/ });
}); });
// ========================================== // ==========================================