mirror of
https://github.com/searxng/searxng.git
synced 2025-12-23 04:00:02 +00:00
[enh] central html escaping of results
This commit is contained in:
@@ -40,7 +40,7 @@ except:
|
|||||||
logger.critical("cannot import dependency: pygments")
|
logger.critical("cannot import dependency: pygments")
|
||||||
from sys import exit
|
from sys import exit
|
||||||
exit(1)
|
exit(1)
|
||||||
|
from cgi import escape
|
||||||
from datetime import datetime, timedelta
|
from datetime import datetime, timedelta
|
||||||
from urllib import urlencode
|
from urllib import urlencode
|
||||||
from urlparse import urlparse, urljoin
|
from urlparse import urlparse, urljoin
|
||||||
@@ -433,8 +433,9 @@ def index():
|
|||||||
for result in results:
|
for result in results:
|
||||||
if output_format == 'html':
|
if output_format == 'html':
|
||||||
if 'content' in result and result['content']:
|
if 'content' in result and result['content']:
|
||||||
result['content'] = highlight_content(result['content'][:1024], search_query.query.encode('utf-8'))
|
result['content'] = highlight_content(escape(result['content'][:1024]),
|
||||||
result['title'] = highlight_content(result['title'], search_query.query.encode('utf-8'))
|
search_query.query.encode('utf-8'))
|
||||||
|
result['title'] = highlight_content(escape(result['title']), search_query.query.encode('utf-8'))
|
||||||
else:
|
else:
|
||||||
if result.get('content'):
|
if result.get('content'):
|
||||||
result['content'] = html_to_text(result['content']).strip()
|
result['content'] = html_to_text(result['content']).strip()
|
||||||
|
|||||||
Reference in New Issue
Block a user