jandieman
/
searxng
mirror of https://github.com/searxng/searxng.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
searxng/searx
History
Markus Heiser ab8e5383fb [mod] remove X-XSS-Protection headers 
Deprecated header not used by browsers nowadays[1]:

"""In modern browsers, X-XSS-Protection has been deprecated in favor of the
Content-Security-Policy to disable the use of inline JavaScript. Its use can
introduce XSS vulnerabilities in otherwise safe websites. This should not be
used unless you need to support older web browsers that don’t yet support CSP.
It is thus recommended to set the header as X-XSS-Protection: 0."""[2]

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
[2] https://infosec.mozilla.org/guidelines/web_security#x-xss-protection

Closes: https://github.com/searxng/searxng/issues/3171
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
 		2024-01-31 17:23:41 +01:00
..
answerers [mod] random answerer: add random hex color generator 2023-08-27 18:59:54 +02:00
botdetection Block HeadlessChrome (#3116) 2024-01-17 09:14:36 +01:00
data Update searx.data - update_wikidata_units.py 2024-01-29 14:04:24 +01:00
enginelib [fix] spelling 2023-09-18 16:20:27 +02:00
engines [fix] brave.search - update result selectors to fit to new layout 2024-01-31 16:21:56 +01:00
infopage [mod] search-syntax.md: add tutorial about the feeling lucky feature 2023-09-21 15:17:23 +02:00
metrics [fix] spelling 2023-09-18 16:20:27 +02:00
network [fix] spelling 2023-09-18 16:20:27 +02:00
plugins [mod] isolation of botdetection from the limiter 2023-11-01 06:44:56 +01:00
search [fix] SyntaxWarning: invalid escape sequence '\>' 2024-01-15 18:27:21 +01:00
static [build] /static 2024-01-31 17:22:03 +01:00
templates/simple [fix] justify engines/cached/proxied vertically 2024-01-31 17:22:03 +01:00
translations [translations] update from Weblate 2024-01-29 15:01:37 +01:00
__init__.py [mod] document server:public_instance & remove it out of the botdetection 2023-11-01 06:44:56 +01:00
autocomplete.py [feat] autocompleter: implementation of stract (beta) 2024-01-07 11:18:16 +01:00
babel_extract.py [mod] move category and names of constants to searx/searxng.msg 2022-03-16 09:55:53 +01:00
compat.py [fix] pyright repported errors 2022-07-30 18:04:44 +02:00
exceptions.py [fix] spelling 2023-09-18 16:20:27 +02:00
external_bang.py [mod] external bang: go to main instead of search page when query is empty 2023-04-25 15:02:34 +02:00
external_urls.py [fix] typos / reported by @kianmeng in searx PR-3366 2022-09-27 18:32:14 +02:00
flaskfix.py [format.python] initial formatting of the python code 2021-12-27 09:26:22 +01:00
limiter.py [mod] document server:public_instance & remove it out of the botdetection 2023-11-01 06:44:56 +01:00
limiter.toml [mod] isolation of botdetection from the limiter 2023-11-01 06:44:56 +01:00
locales.py [fix] spelling 2023-09-18 16:20:27 +02:00
preferences.py [mod] add hotkeys option to settings.yml 2023-10-09 18:13:00 +02:00
query.py [feat] implement feeling lucky feature 2023-09-19 09:40:57 +02:00
redisdb.py move searx.shared.redisdb to searx.redisdb 2022-12-10 09:26:38 +01:00
redislib.py [fix] spelling 2023-09-18 16:20:27 +02:00
results.py [mod] Retain page numbers even when there are no results 2023-11-27 14:07:04 +01:00
searxng.msg [mod] clarify the difference of the default category and subgrouping 2023-04-07 11:03:25 +02:00
settings.yml [mod] remove X-XSS-Protection headers 2024-01-31 17:23:41 +01:00
settings_defaults.py [mod] add option max_page 2023-12-03 13:47:17 +01:00
settings_loader.py [fix] spelling 2023-09-18 16:20:27 +02:00
sxng_locales.py Update searx.data - update_engine_traits.py 2024-01-29 14:02:30 +01:00
unixthreadname.py [format.python] initial formatting of the python code 2021-12-27 09:26:22 +01:00
utils.py [fix] HTMLParser: undocumented not implemented method 2023-10-22 10:35:02 +02:00
version.py [fix] typos in documentation & messages 2023-08-13 08:50:29 +02:00
webadapter.py Revert "[fix] limit maximum page number of a search query to page 50." (#2979) 2023-11-01 16:55:20 +00:00
webapp.py [feat] preferences: button to copy input to restore preferences hash 2024-01-29 18:09:22 +01:00
webutils.py [fix] do highlight replacement at once 2024-01-29 13:15:37 +01:00