Browse Source

fixed an xss vuln, added librex.mikata.ru to the instance list

hnhx 2 years ago
parent
commit
5f51afc948
3 changed files with 21 additions and 1 deletions
  1. 2 0
      README.md
  2. 18 0
      instances.json
  3. 1 1
      search.php

+ 2 - 0
README.md

@@ -15,6 +15,7 @@
 |-|-|-|-|
 | [librex.beparanoid.de](https://librex.beparanoid.de/) | [✅](http://librex.2356uhnbpv5nk3bni5bv6jg2cd6lgj664kwx3lhyelstpttpyv4kk2qd.onion/) | ❌ | 🇭🇺 HU (OFFICIAL INSTANCE) |
 | [lx.vern.cc](https://lx.vern.cc/) | [✅](http://lx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion/) | [✅](http://vernziqfqvweijfaacmwazohgpdo2bt2ib2jlupt2pwwu27bhgxq.b32.i2p/) | 🇺🇸 US |
+| [librex.mikata.ru](https://librex.mikata.ru/) | [✅](http://f7ssz7l3biu4fugwctfpcx4txg5yq4gqhrt473ledsuc3ivtd3omniid.onion/) | ❌ | 🇺🇸 US |
 | [search.davidovski.xyz](https://search.davidovski.xyz/) | ❌ | ❌ | 🇬🇧 UK |
 | [search.funami.tech](https://search.funami.tech/) | ❌ | ❌ | 🇰🇷 KR |
 | [search.madreyk.xyz](https://search.madreyk.xyz/) | ❌ | ❌ | 🇩🇪 DE |
@@ -32,6 +33,7 @@ LibreX gives you results from Google, Brave, Qwant, Ahmia and popular torrent si
 <br>
 If you would like to learn more about LibreX check out the [Wiki](https://github.com/hnhx/librex/wiki).
 <br>
+
 ### Mirror
 
 You can access the source code via this git mirror

+ 18 - 0
instances.json

@@ -6,6 +6,18 @@
               "i2p": null,
               "country": "HU"
           },
+          {
+              "clearnet": "https://lx.vern.cc/",
+              "tor": "http://lx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion/",
+              "i2p": "http://vernziqfqvweijfaacmwazohgpdo2bt2ib2jlupt2pwwu27bhgxq.b32.i2p/",
+              "country": "US"
+          },
+          {
+              "clearnet": "https://librex.mikata.ru/",
+              "tor": "http://f7ssz7l3biu4fugwctfpcx4txg5yq4gqhrt473ledsuc3ivtd3omniid.onion/",
+              "i2p": null,
+              "country": "US"
+          },
           {
               "clearnet": "https://search.davidovski.xyz/",
               "tor": null,
@@ -30,6 +42,12 @@
               "i2p": null,
               "country": "DE"
           },
+          {
+              "clearnet": "https://buscar.weblibre.org/",
+              "tor": null,
+              "i2p": null,
+              "country": "CL"
+          },
           {
               "clearnet": "https://search.ahwx.org/",
               "tor": null,

+ 1 - 1
search.php

@@ -28,7 +28,7 @@
                 {
                     if ($key != "q" && $key != "p" && $key != "t")
                     {
-                        echo "<input type=\"hidden\" name=\"$key\" value=\"$value\"/>";
+                        echo "<input type=\"hidden\" name=\"" . htmlspecialchars($key) . "\" value=\"" . htmlspecialchars($value) . "\"/>";
                     }
                 }