summaryrefslogtreecommitdiff
path: root/searx/templates/simple/base.html
diff options
context:
space:
mode:
authorMarkus Heiser <markus.heiser@darmarit.de>2023-04-19 18:59:23 +0200
committerMarkus Heiser <markus.heiser@darmarit.de>2023-05-29 14:54:56 +0200
commit5226044c13817688a5ca3461743844dca4ed3d2b (patch)
tree562158cf27ac7819dd38a0979ee45557d7fd344a /searx/templates/simple/base.html
parentdba569462d0e9c4dbd77a54bb42ef5c3b1916142 (diff)
downloadsearxng-5226044c13817688a5ca3461743844dca4ed3d2b.tar.gz
searxng-5226044c13817688a5ca3461743844dca4ed3d2b.zip
[mod] limiter: add random token to the limiter URL
By adding a random component in the limiter URL a bot can no longer send a ping by request a static URL. Related: https://github.com/searxng/searxng/pull/2357#issuecomment-1518525094 Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
Diffstat (limited to 'searx/templates/simple/base.html')
-rw-r--r--searx/templates/simple/base.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/searx/templates/simple/base.html b/searx/templates/simple/base.html
index dfe4ea265..9f7cdbb8e 100644
--- a/searx/templates/simple/base.html
+++ b/searx/templates/simple/base.html
@@ -18,7 +18,7 @@
<link rel="stylesheet" href="{{ url_for('static', filename='css/searxng.min.css') }}" type="text/css" media="screen" />
{% endif %}
{% if get_setting('server.limiter') %}
- <link rel="stylesheet" href="/limiter.css" type="text/css" media="screen" />
+ <link rel="stylesheet" href="{{ url_for('limiter_css', token=limiter_token) }}" type="text/css" media="screen" />
{% endif %}
{% block styles %}{% endblock %}
<!--[if gte IE 9]>-->