[doc] adds the missing documentation of the server.method settings.

TL;DR; For all the issues that comes with HTTP POST I recommend instance
maintainers to switch to GET and lock the property in the preferences:

```yaml
server:
  method: GET

preferences:
  lock:
    - method
```

We don't want this in the defaults of the SearXNG distributions for the pros vs
cons listed in this discussion:

- https://github.com/searxng/searxng/pull/3619
This commit is contained in:
Markus Heiser
2025-01-30 14:24:38 +01:00
parent 738906358b
commit f4250b6d40
2 changed files with 18 additions and 3 deletions
+3 -2
View File
@@ -100,8 +100,9 @@ server:
image_proxy: false
# 1.0 and 1.1 are supported
http_protocol_version: "1.0"
# POST queries are more secure as they don't show up in history but may cause
# problems when using Firefox containers
# POST queries are "more secure!" but are also the source of hard-to-locate
# annoyances, which is why GET may be better for end users and their browsers.
# see https://github.com/searxng/searxng/pull/3619
method: "POST"
default_http_headers:
X-Content-Type-Options: nosniff