Probably less readable, but another ternary option--used inline:

use strict;
use warnings;

my $resul = 'string stuff';
my $resp = "\a site " . ( $resul =~ /xss/ ? 'nao ' : '' ) . "vulnerave
+l!!!\n\n";
print $resp;
[download]