mirror of
https://github.com/searxng/searxng
synced 2024-01-01 18:24:07 +00:00
[fix] query escaped in all htmls, invalid todo removed
This commit is contained in:
parent
22a3cf7ac7
commit
ed925cf561
@ -307,7 +307,6 @@ def autocompleter():
|
|||||||
else:
|
else:
|
||||||
request_data = request.args
|
request_data = request.args
|
||||||
|
|
||||||
# TODO fix XSS-vulnerability
|
|
||||||
query = request_data.get('q', '').encode('utf-8')
|
query = request_data.get('q', '').encode('utf-8')
|
||||||
|
|
||||||
if not query:
|
if not query:
|
||||||
|
Loading…
Reference in New Issue
Block a user