logo

searx

Unnamed repository; edit this file 'description' to name the repository.
commit: 0ad272c5cb81a9c69008aa86a1f29cd642ddf4ff
parent: 8adc80123ac095e11ae3eae47fa05bdb574da731
Author: Adam Tauber <adam.tauber@balabit.com>
Date:   Wed, 30 Sep 2015 16:42:03 +0200

[fix] content escaping - closes #441

TODO check other engines too

Diffstat:

searx/engines/google.py | 5+++--
1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/searx/engines/google.py b/searx/engines/google.py @@ -9,6 +9,7 @@ # @parse url, title, content, suggestion import re +from cgi import escape from urllib import urlencode from urlparse import urlparse, parse_qsl from lxml import html @@ -167,7 +168,7 @@ def parse_url(url_string, google_hostname): def extract_text_from_dom(result, xpath): r = result.xpath(xpath) if len(r) > 0: - return extract_text(r[0]) + return escape(extract_text(r[0])) return None @@ -273,7 +274,7 @@ def response(resp): # parse suggestion for suggestion in dom.xpath(suggestion_xpath): # append suggestion - results.append({'suggestion': extract_text(suggestion)}) + results.append({'suggestion': escape(extract_text(suggestion))}) # return results return results