Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

About stats.searx.xyz #1560

Open
dalf opened this issue Apr 11, 2019 · 4 comments

Comments

Projects
None yet
2 participants
@dalf
Copy link
Collaborator

commented Apr 11, 2019

Is the code public and / or open source ?

For example it shows that the instances searx.kvch.me and www.search404.io have invalid certificates, but according to Firefox and Chrome there is no issue.

@dalf dalf added the meta label Apr 11, 2019

@Pofilo

This comment has been minimized.

Copy link
Collaborator

commented Apr 11, 2019

And we also don't know where are the tests executed. America, Europe ? It could be interesting to host it at multiple place for the Response Time field. This field is important I guess for newcomers.
I can host one instance at Paris.

@dalf

This comment has been minimized.

Copy link
Collaborator Author

commented Apr 11, 2019

Another point : it would be nice to display the certificate issuer because some intances are using CloudFlare ( adoll.ml and searx.lavatech.top for example).

@dalf

This comment has been minimized.

Copy link
Collaborator Author

commented Apr 17, 2019

Another feature request : use puppeteer to load the front page then make a basic search. Purpose : see if external links are loaded (see #1572 (comment) ).

Note : it won't prevent someone to actually modify searx on the server to record everything.

@dalf

This comment has been minimized.

Copy link
Collaborator Author

commented May 2, 2019

Another thing to test : are the links modified by Javascript ?
Example :

var els = document.querySelectorAll("a[href^='https://www.amazon.com']");
for (var i = 0, l = els.length; i < l; i++) {var el = els[i];url = new URL(el.href);url.searchParams.append('tag','xxxxxx');el.href=url;}

See #1241 (comment)

It can be done at the last second, when the user clicks on the link :

link.addEventListener( 'click', function() {
    link.setAttribute("href","something else");
});

I'm not sure how to deal with that.

Either with puppeteer or just downloads the pages and make a diff (with html, js, css, everything).
Most probably this method requires a review, because some instance just modify the logo, and it's not a privacy problem.

[EDIT] One solution : make a list of reviewed instances. When a new instance is added, it is not displayed publicly until someone reviews the modifications. A fingerprint of the modifications is done. Later, any additional modifications require another review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.