OwlBurst/Ponysearch
1
0
Fork 0
forked from Ponysearch/Ponysearch
Code Pull requests Activity

Merge pull request #2256 from kvch/force-setting-secret-key

Browse source 
Force admins to set secret_key if debug mode is disabled
This commit is contained in:
Adam Tauber 2020-10-09 18:42:39 +02:00 committed by GitHub
commit e78bfd4d8b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
searx/__init__.py
View file

@ -85,3 +85,7 @@ if 'SEARX_SECRET' in environ:
settings['server']['secret_key'] = environ['SEARX_SECRET']
if 'SEARX_BIND_ADDRESS' in environ:
settings['server']['bind_address'] = environ['SEARX_BIND_ADDRESS']
if not searx_debug and settings['server']['secret_key'] == 'ultrasecretkey':
logger.error('server.secret_key is not changed. Please use something else instead of ultrasecretkey.')
exit(1)

2
searx/settings_robot.yml
View file

@ -8,7 +8,7 @@ search:
server:
port : 11111
bind_address : 127.0.0.1
secret_key : "ultrasecretkey" # change this!
secret_key : "changedultrasecretkey"
base_url : False
http_protocol_version : "1.0"

2
tests/__init__.py
View file

@ -0,0 +1,2 @@
import os
os.environ['SEARX_DEBUG'] = '1'