1
0
mirror of https://github.com/searxng/searxng.git synced 2024-11-08 14:20:10 +01:00
searxng/searx
Markus Heiser 7b40c736e6 [mod] hardening SearXNG instances by default (formats)
Deny formats has been implemented in 6ed4616d.

To harden SearXNG instances by default, other formats than HTML should be
denied.  Most of JSON, RSS and CSV requests are bots [1]::

    Bots are the only users of this feature on a public instance, and they abuse
    it too much that the engines rate limit pretty quickly the IP address of the
    instance.

[1] https://github.com/searxng/searxng/issues/95

Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2021-07-25 12:59:09 +02:00
..
answerers [fix] answers: don't crash when the query is an empty string 2021-03-01 10:52:39 +01:00
data [fix] Qwant engines - implement API v3 and add 'quant videos' 2021-07-14 09:47:32 +02:00
engines Merge pull request #211 from MarcAbonce/onions_v3_fix_searxng 2021-07-16 17:25:37 +02:00
metrics [refactor] metrics.get_reliabilities() - make code more readable 2021-05-22 15:17:18 +02:00
network [mod] move all default settings into searx.settings_defaults 2021-06-01 08:10:15 +02:00
plugins [mod] oscar theme: /preferences : HTML detail order match visual tabs 2021-06-17 15:29:07 +02:00
raise_for_httperror [enh] rewrite and enhance metrics 2021-04-21 16:24:46 +02:00
search [pylint] prepare for pylint v2.9.3 / fix some (new) pylint issues 2021-07-03 17:54:08 +02:00
shared [fix] checker: don't run the checker when uwsgi is not properly configured 2021-01-13 14:07:39 +01:00
static [build] /static 2021-06-28 10:39:10 +02:00
templates [mod] drop usage of the searx.brand namespace (templates & /config) 2021-07-21 13:38:28 +02:00
translations [enh] update translations from transifex 2021-03-27 19:10:54 +01:00
__init__.py [mod] drop obsolete searx.brand namespace 2021-07-21 13:38:28 +02:00
autocomplete.py [httpx] replace searx.poolrequests by searx.network 2021-04-12 17:25:56 +02:00
exceptions.py [enh] add raise_for_httperror 2020-12-11 14:37:08 +01:00
external_bang.py [mod] add utils/fetch_external_bangs.py 2021-02-24 18:48:36 +01:00
external_urls.py [enh] openstreetmap / map template: improve results 2021-06-09 18:08:23 +02:00
flaskfix.py [mod] refactor: move Flask proxy fix to searx.flaskfix module 2021-06-08 15:54:11 +02:00
languages.py Update searx.data - update_languages.py 2021-03-05 10:56:46 +00:00
preferences.py [pylint] prepare for pylint v2.9.3 / fix some (new) pylint issues 2021-07-03 17:54:08 +02:00
query.py [enh] autocomplete refactoring, autocomplete on external bangs 2021-03-01 19:12:32 +01:00
results.py [fix] offline engine: don't crash on time recording 2021-05-22 15:17:18 +02:00
settings_defaults.py [fix] /preferences: remove the empty engine category "social medias" (it is "social media") 2021-07-23 10:43:16 +02:00
settings_loader.py [fix] unit test: don't load /etc/searx/settings.yml 2021-05-18 17:23:21 +02:00
settings_robot.yml [fix] add missing brand options to the settings SCHEMA 2021-07-21 13:38:28 +02:00
settings.yml [mod] hardening SearXNG instances by default (formats) 2021-07-25 12:59:09 +02:00
testing.py Bump pylint from 2.7.4 to 2.8.2 2021-05-03 15:45:30 +02:00
unixthreadname.py [mod] move hook to set Unix thread name into searx.unixthreadname 2021-06-08 15:54:11 +02:00
utils.py [fix] strip spaces from searx user agent 2021-06-09 18:08:23 +02:00
version.py [enh] release v1.0.0 2021-03-27 20:30:08 +01:00
webadapter.py [enh] add ability to send engine data to subsequent requests 2021-03-06 12:12:35 +01:00
webapp.py [mod] drop usage of the searx.brand namespace (templates & /config) 2021-07-21 13:38:28 +02:00
webutils.py [mod] move all default settings into searx.settings_defaults 2021-06-01 08:10:15 +02:00