mirror of
https://github.com/searxng/searxng.git
synced 2025-07-16 17:59:30 +02:00
eb9f20a823
Replaces `x_for` functionality with `trusted_proxies`. This allows defining which IP / ranges to trust extracting the client IP address from X-Forwarded-For and X-Real-IP headers. We don't know if the proxy chain will give us the proper client address, so we rely on reading the headers of the proxy before SearXNG (if there is one, in that case it must be added to trusted_proxies) hoping it has done the proper checks. In case a proxy in the chain does not check the client address correctly, integrity is compromised and this should be fixed by whoever manages the proxy, not us. I had to move the get_cnf func to another file (config.py) to prevent cyclic imports since we need to read the list inside _helpers.py Closes https://github.com/searxng/searxng/issues/4907 Closes https://github.com/searxng/searxng/issues/3632 Closes https://github.com/searxng/searxng/issues/3191 Closes https://github.com/searxng/searxng/issues/1237 Related https://github.com/searxng/searxng-docker/issues/386 Related https://github.com/inetol-infrastructure/searxng-container/issues/81
85 lines
3.2 KiB
Python
85 lines
3.2 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
# pylint: disable=missing-module-docstring,disable=missing-class-docstring,invalid-name
|
|
|
|
from parameterized.parameterized import parameterized
|
|
|
|
from flask_babel import gettext
|
|
|
|
import searx.plugins
|
|
import searx.preferences
|
|
import searx.limiter
|
|
import searx.botdetection.config
|
|
|
|
from searx.extended_types import sxng_request
|
|
from searx.result_types import Answer
|
|
|
|
from tests import SearxTestCase
|
|
from .test_plugins import do_post_search
|
|
|
|
|
|
class PluginIPSelfInfo(SearxTestCase):
|
|
|
|
def setUp(self):
|
|
super().setUp()
|
|
engines = {}
|
|
|
|
self.storage = searx.plugins.PluginStorage()
|
|
self.storage.load_settings({"searx.plugins.self_info.SXNGPlugin": {"active": True}})
|
|
self.storage.init(self.app)
|
|
self.pref = searx.preferences.Preferences(["simple"], ["general"], engines, self.storage)
|
|
self.pref.parse_dict({"locale": "en"})
|
|
|
|
cfg = searx.botdetection.config.get_cfg()
|
|
searx.botdetection.init(cfg, None)
|
|
|
|
def test_plugin_store_init(self):
|
|
self.assertEqual(1, len(self.storage))
|
|
|
|
def test_v4_pageno_1_2(self):
|
|
with self.app.test_request_context():
|
|
sxng_request.preferences = self.pref
|
|
sxng_request.remote_addr = "127.0.0.1"
|
|
sxng_request.headers = {"X-Forwarded-For": "1.2.3.4, 127.0.0.1", "X-Real-IP": ""} # type: ignore
|
|
answer = Answer(answer=gettext("Your IP is: ") + "1.2.3.4")
|
|
|
|
search = do_post_search("ip", self.storage, pageno=1)
|
|
self.assertIn(answer, search.result_container.answers)
|
|
|
|
search = do_post_search("ip", self.storage, pageno=2)
|
|
self.assertEqual(list(search.result_container.answers), [])
|
|
|
|
def test_v6_pageno_1_2(self):
|
|
with self.app.test_request_context():
|
|
sxng_request.preferences = self.pref
|
|
sxng_request.remote_addr = "::1"
|
|
sxng_request.headers = { # type: ignore
|
|
"X-Forwarded-For": "fd0f:a306:f289:0000:0000:0000:ffff:baba, ::1, 127.0.0.1",
|
|
"X-Real-IP": "fd0f:a306:f289:0000:0000:0000:ffff:baba",
|
|
}
|
|
answer = Answer(answer=gettext("Your IP is: ") + "fd0f:a306:f289::ffff:baba")
|
|
|
|
search = do_post_search("ip", self.storage, pageno=1)
|
|
self.assertIn(answer, search.result_container.answers)
|
|
|
|
search = do_post_search("ip", self.storage, pageno=2)
|
|
self.assertEqual(list(search.result_container.answers), [])
|
|
|
|
@parameterized.expand(
|
|
[
|
|
"user-agent",
|
|
"USER-AgenT lorem ipsum",
|
|
]
|
|
)
|
|
def test_user_agent_in_answer(self, query: str):
|
|
query = "user-agent"
|
|
|
|
with self.app.test_request_context():
|
|
sxng_request.preferences = self.pref
|
|
sxng_request.user_agent = "Dummy agent" # type: ignore
|
|
answer = Answer(answer=gettext("Your user-agent is: ") + "Dummy agent")
|
|
|
|
search = do_post_search(query, self.storage, pageno=1)
|
|
self.assertIn(answer, search.result_container.answers)
|
|
|
|
search = do_post_search(query, self.storage, pageno=2)
|
|
self.assertEqual(list(search.result_container.answers), [])
|