Merge pull request #226 from return42/hardening

[mod] hardening SearXNG instances by default (formats)

searx/settings.yml

@@ -30,7 +30,9 @@ search:
   # max ban time in seconds after engine errors
   max_ban_time_on_fail: 120
   # remove format to deny access, use lower case.
-  formats: [html, csv, json, rss]
+  # formats: [html, csv, json, rss]
+  formats:
+    - html
 
 server:
   # If you change port, bind_address or base_url don't forget to rebuild

tests/unit/__init__.py

@@ -0,0 +1,6 @@
+import os
+from os.path import dirname, sep, abspath
+
+# In unit tests the user settings from unit/settings/test_settings.yml are used.
+os.environ['SEARX_SETTINGS_PATH'] = abspath(
+    dirname(__file__) + sep + 'settings' + sep + 'test_settings.yml')

tests/unit/settings/test_settings.yml

@@ -0,0 +1,5 @@
+# This SearXNG setup is used in unit tests
+
+use_default_settings: true
+search:
+  formats: [html, csv, json, rss]