zaclys
/
searxng
mirror of https://github.com/searxng/searxng.git
1
0
Fork 1
Code Issues Packages Projects Releases Wiki Activity
searxng/searx
History
Markus Heiser 2b26285a73 [fix] simple theme: make autocomplete-js CSP compliant 
The CSP issue is, that the `_Position` function in the autocomplete-js set the
style attributes by `setAttribute("style", ...)`.  Using `setAttribute` to set
the style attribute invokes the HTML parser and CSP is triggered [1].

This patch overwrite the `_Position` function of autocomplete-js.

BTW: remove trailing whitespace

[1] https://stackoverflow.com/a/57633533

Closes: https://github.com/searxng/searxng/issues/352
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
 		2021-12-05 11:48:23 +01:00
..
answerers [fix] answers: don't crash when the query is an empty string 2021-03-01 10:52:39 +01:00
data Merge pull request #571 from searxng/update_data_update_languages.py 2021-12-01 07:30:41 +01:00
engines [fix] google-videos engine: ignore news articles 2021-11-26 17:11:20 +01:00
metrics [fix] error recorder: avoid RuntimeError on some rare occasion 2021-09-17 10:06:24 +02:00
network [enh] verify that Tor proxy works every time searx starts 2021-10-12 21:01:02 +02:00
plugins [mod] searx.plugins.prepare_package_resources() - use generators 2021-10-07 18:41:56 +02:00
search [enh] verify that Tor proxy works every time searx starts 2021-10-12 21:01:02 +02:00
shared [fix] checker: don't run the checker when uwsgi is not properly configured 2021-01-13 14:07:39 +01:00
static [fix] simple theme: make autocomplete-js CSP compliant 2021-12-05 11:48:23 +01:00
templates [fix] simple theme: img tile, shows duplicate information on screen 2021-11-29 20:47:37 +01:00
translations [translations] update 2021-12-03 07:17:47 +00:00
__init__.py SearXNG: environment variables 2021-10-02 16:54:11 +02:00
autocomplete.py [fix] startpage autocompletion 2021-11-13 13:26:47 +01:00
exceptions.py [enh] add raise_for_httperror 2020-12-11 14:37:08 +01:00
external_bang.py [pylint] fix global-variable-not-assigned issues 2021-09-17 10:14:27 +02:00
external_urls.py [enh] openstreetmap / map template: improve results 2021-06-09 18:08:23 +02:00
flaskfix.py [pylint] searx: drop no longer needed 'missing-function-docstring' 2021-09-07 13:34:35 +02:00
languages.py [mod] update_languages: min_engines_per_country=7 2021-10-26 12:13:23 +02:00
locales.py [mod] locale: use hyphen everywhere except for Babel 2021-10-12 21:06:20 +02:00
preferences.py Merge pull request #485 from dalf/pref_query_in_title 2021-11-24 13:10:27 +01:00
query.py [enh] reduce the available language list 2021-10-26 10:27:05 +02:00
results.py [fix] searx.results: fix pylint issue "useless-with-lock" 2021-11-26 08:46:43 +01:00
settings.yml Merge pull request #485 from dalf/pref_query_in_title 2021-11-24 13:10:27 +01:00
settings_defaults.py Merge pull request #485 from dalf/pref_query_in_title 2021-11-24 13:10:27 +01:00
settings_loader.py SearXNG: load /etc/searxng/settings.yml 2021-10-11 12:28:55 +00:00
unixthreadname.py [pylint] searx: drop no longer needed 'missing-function-docstring' 2021-09-07 13:34:35 +02:00
utils.py [fix] fix match_language issue to make zh-TW match to zh-Hant-TW 2021-10-12 21:06:20 +02:00
version.py [pylint] searx: drop no longer needed 'missing-function-docstring' 2021-09-07 13:34:35 +02:00
webadapter.py [fix] typo in searx.webadapter.parse_lang 2021-09-04 08:39:45 +02:00
webapp.py [fix] route /autocompleter: escape `<` and `>` in the simple theme 2021-11-29 07:20:08 +01:00
webutils.py [mod] move all default settings into searx.settings_defaults 2021-06-01 08:10:15 +02:00