mirrors/searxng
1
0
Fork 0
mirror of https://github.com/searxng/searxng.git synced 2024-12-23 17:50:29 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #557 from return42/fix-autocomplete

Browse source 
[fix] route /autocompleter: escape `<` and `>` in the simple theme
This commit is contained in:
Alexandre Flament 2021-11-29 16:58:15 +01:00 committed by GitHub
commit 3700094f3a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
searx/webapp.py
View file

@ -916,6 +916,7 @@ def autocompleter():
suggestions = json.dumps([sug_prefix, results]) suggestions = json.dumps([sug_prefix, results])
mimetype = 'application/x-suggestions+json' mimetype = 'application/x-suggestions+json'
if get_current_theme_name() == 'simple':
suggestions = escape(suggestions, False) suggestions = escape(suggestions, False)
return Response(suggestions, mimetype=mimetype) return Response(suggestions, mimetype=mimetype)