From 178fc6dfde1633a0e5b05a1740db990a8f1712ad Mon Sep 17 00:00:00 2001 From: Xavier horwood <39760456+Xavierhorwood@users.noreply.github.com> Date: Mon, 4 Jul 2022 22:30:36 +1000 Subject: [PATCH] add config check --- searx/webapp.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/searx/webapp.py b/searx/webapp.py index 151eb5cc6..b7ff2e101 100755 --- a/searx/webapp.py +++ b/searx/webapp.py @@ -1319,6 +1319,8 @@ def clear_cookies(): @app.route('/config') def config(): + if not get_setting('security.config_page'): + flask.abort(403) """Return configuration in JSON format.""" _engines = [] for name, engine in engines.items():