Browse Source

Merge pull request #555 from return42/fix-autocomplete

[fix] route /autocompleter: escape '<' and '>' in the response
Markus Heiser 3 years ago
parent
commit
f0db33e14b
1 changed files with 1 additions and 0 deletions
  1. 1 0
      searx/webapp.py

+ 1 - 0
searx/webapp.py

@@ -916,6 +916,7 @@ def autocompleter():
         suggestions = json.dumps([sug_prefix, results])
         suggestions = json.dumps([sug_prefix, results])
         mimetype = 'application/x-suggestions+json'
         mimetype = 'application/x-suggestions+json'
 
 
+    suggestions = escape(suggestions, False)
     return Response(suggestions, mimetype=mimetype)
     return Response(suggestions, mimetype=mimetype)