on master help sign in
[fix] query escaped in all htmls, invalid todo removed
ed925cfAdam Tauber
searx/webapp.py−1
@@ -307,7 +307,6 @@ def autocompleter():
307 else:
307 else:
308 request_data = request.args
308 request_data = request.args
309
309
310− # TODO fix XSS-vulnerability
311 query = request_data.get('q', '').encode('utf-8')
310 query = request_data.get('q', '').encode('utf-8')
312
311
313 if not query:
312 if not query: