From 367fb6537c3a9fd6e54f707118a5a9e9d2252703 Mon Sep 17 00:00:00 2001
From: Brock Vojkovic <git@vojk.au>
Date: Sat, 19 Sep 2026 13:30:06 +0800
Subject: [PATCH] [fix] engines: tusksearch cors request headers (#6758)

Added the ``Origin`` and ``Sec-Fetch-Site`` http headers to bypass tusksearch's latest bot detection.
---
 searx/engines/tusksearch.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/searx/engines/tusksearch.py b/searx/engines/tusksearch.py
index b9e6142ff..0639df516 100644
--- a/searx/engines/tusksearch.py
+++ b/searx/engines/tusksearch.py
@@ -96,6 +96,8 @@ def request(query: str, params: "OnlineParams") -> None:
             "x-lon": str(round(random.random() * 90, 4)),
             "x-lat": str(round(random.random() * 90, 4)),
             "Referer": "https://tusksearch.com/",
+            "Origin": "https://tusksearch.com",
+            "Sec-Fetch-Site": "same-site",
         }
     )