searx

commit: 0ad272c5cb81a9c69008aa86a1f29cd642ddf4ff
parent: 8adc80123ac095e11ae3eae47fa05bdb574da731
Author: Adam Tauber <adam.tauber@balabit.com>
Date:   Wed, 30 Sep 2015 16:42:03 +0200

[fix] content escaping - closes #441

TODO check other engines too

Diffstat:
M
searx/engines/google.py
5
+++--

1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/searx/engines/google.py b/searx/engines/google.py
@@ -9,6 +9,7 @@
 # @parse       url, title, content, suggestion
 
 import re
+from cgi import escape
 from urllib import urlencode
 from urlparse import urlparse, parse_qsl
 from lxml import html
@@ -167,7 +168,7 @@ def parse_url(url_string, google_hostname):
 def extract_text_from_dom(result, xpath):
     r = result.xpath(xpath)
     if len(r) > 0:
-        return extract_text(r[0])
+        return escape(extract_text(r[0]))
     return None
 
 
@@ -273,7 +274,7 @@ def response(resp):
     # parse suggestion
     for suggestion in dom.xpath(suggestion_xpath):
         # append suggestion
-        results.append({'suggestion': extract_text(suggestion)})
+        results.append({'suggestion': escape(extract_text(suggestion))})
 
     # return results
     return results