on master help sign in
Force admins to set secret_key if debug mode is disabled
116f7a6Noémi Ványi
searx/__init__.py+4
@@ -85,3 +85,7 @@ if 'SEARX_SECRET' in environ:
85 settings['server']['secret_key'] = environ['SEARX_SECRET']
85 settings['server']['secret_key'] = environ['SEARX_SECRET']
86if 'SEARX_BIND_ADDRESS' in environ:
86if 'SEARX_BIND_ADDRESS' in environ:
87 settings['server']['bind_address'] = environ['SEARX_BIND_ADDRESS']
87 settings['server']['bind_address'] = environ['SEARX_BIND_ADDRESS']
88+
89+if not searx_debug and settings['server']['secret_key'] == 'ultrasecretkey':
90+ logger.error('server.secret_key is not changed. Please use something else instead of ultrasecretkey.')
91+ exit(1)
searx/settings_robot.yml+1−1
@@ -8,7 +8,7 @@ search:
8server:
8server:
9 port : 11111
9 port : 11111
10 bind_address : 127.0.0.1
10 bind_address : 127.0.0.1
11− secret_key : "ultrasecretkey" # change this!
11+ secret_key : "changedultrasecretkey"
12 base_url : False
12 base_url : False
13 http_protocol_version : "1.0"
13 http_protocol_version : "1.0"
14
14
tests/__init__.py+2
@@ -0,0 +1,2 @@
1+import os
2+os.environ['SEARX_DEBUG'] = '1'