searx: Strictly match relaxed URLs

To avoid unexpected security consequences.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
This commit is contained in:
Sunil Mohan Adapa 2018-02-26 18:43:12 +05:30
parent c68d76b86f
commit 432aa1b343
No known key found for this signature in database
GPG Key ID: 43EA1CFF0AA7C5F2

View File

@ -1,11 +1,10 @@
# This exclusion rule is to allow Searx to be added as a search engine in Firefox.
<Location ~ "/searx/(opensearch.xml|static/themes/oscar/img/favicon.png)">
<LocationMatch "^/searx/(opensearch.xml|static/themes/oscar/img/favicon.png)$">
Satisfy Any
Allow from all
AuthType None
Require all granted
ProxyPass unix:/run/uwsgi/app/searx/socket|uwsgi://uwsgi-uds-searx/
</Location>
</LocationMatch>
<Location /searx/>