tests/core.test.js

@@ -36,7 +36,7 @@ describe('Enterprise Application Flow & API Validation', () => {
             expect(response.status).toBe(404);
         });
 
-        /*//  OWASP ZAP (/api/search)
+        //  OWASP ZAP (/api/search)
         it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
             const maliciousPayload = '<script>alert("ZAP")</script>';
             const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
@@ -44,7 +44,7 @@ describe('Enterprise Application Flow & API Validation', () => {
             expect(response.status).toBe(200);
             // Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
             expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
-        });*/
+        });
     });
 
     // ==========================================