searxng

3 Commits

Author SHA1 Message Date

Author	SHA1	Message	Date
Alex Balgavy	5d53aac20f	[mod] add hotkeys option to settings.yml The change in the hotkey mechanism introduced in `317db5b04` does not allow configuration via `settings.yml`. This commit adds that functionality. Closes: #2898	2023-10-09 18:13:00 +02:00
Alex Balgavy	8736f5bd70	Use $host in nginx morty.conf template	2021-03-04 11:16:27 +01:00
Alex Balgavy	6b59800dc6	Fix security vulnerabilities in suggested nginx configuration The suggested configurations for nginx found in the documentation and templates lead to vulnerabilities allowing host spoofing [1] and path traversal [2], as reported by Gixy [3]. This commit fixes those issues. [1] https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md [2] https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md [3] https://github.com/yandex/gixy	2021-03-03 12:34:22 +01:00

5d53aac20f

[mod] add hotkeys option to settings.yml

The change in the hotkey mechanism introduced in 317db5b04 does not allow
configuration via `settings.yml`.  This commit adds that functionality.

Closes: #2898

2023-10-09 18:13:00 +02:00

Alex Balgavy 8736f5bd70 Use $host in nginx morty.conf template 2021-03-04 11:16:27 +01:00

Alex Balgavy

6b59800dc6

Fix security vulnerabilities in suggested nginx configuration

The suggested configurations for nginx found in the documentation and
templates lead to vulnerabilities allowing host spoofing [1] and path
traversal [2], as reported by Gixy [3]. This commit fixes those issues.

[1] https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md
[2] https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
[3] https://github.com/yandex/gixy

2021-03-03 12:34:22 +01:00