From 432aa1b343b77c202ad985263874f54c9f3859bc Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Mon, 26 Feb 2018 18:43:12 +0530
Subject: [PATCH] searx: Strictly match relaxed URLs

To avoid unexpected security consequences.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
---
 data/etc/apache2/conf-available/searx-freedombox.conf | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/data/etc/apache2/conf-available/searx-freedombox.conf b/data/etc/apache2/conf-available/searx-freedombox.conf
index f9cde7c7c..5a17cdeb9 100644
--- a/data/etc/apache2/conf-available/searx-freedombox.conf
+++ b/data/etc/apache2/conf-available/searx-freedombox.conf
@@ -1,11 +1,10 @@
 # This exclusion rule is to allow Searx to be added as a search engine in Firefox.
-<Location ~ "/searx/(opensearch.xml|static/themes/oscar/img/favicon.png)">
+<LocationMatch "^/searx/(opensearch.xml|static/themes/oscar/img/favicon.png)$">
     Satisfy Any
     Allow from all
     AuthType None
-    Require all granted
     ProxyPass unix:/run/uwsgi/app/searx/socket|uwsgi://uwsgi-uds-searx/
-</Location>
+</LocationMatch>
 
 
 <Location /searx/>