webapp.py 43 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216
  1. #!/usr/bin/env python
  2. '''
  3. searx is free software: you can redistribute it and/or modify
  4. it under the terms of the GNU Affero General Public License as published by
  5. the Free Software Foundation, either version 3 of the License, or
  6. (at your option) any later version.
  7. searx is distributed in the hope that it will be useful,
  8. but WITHOUT ANY WARRANTY; without even the implied warranty of
  9. MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  10. GNU Affero General Public License for more details.
  11. You should have received a copy of the GNU Affero General Public License
  12. along with searx. If not, see < http://www.gnu.org/licenses/ >.
  13. (C) 2013- by Adam Tauber, <asciimoo@gmail.com>
  14. '''
  15. import sys
  16. if sys.version_info[0] < 3:
  17. print('\033[1;31m Python2 is no longer supported\033[0m')
  18. exit(1)
  19. if __name__ == '__main__':
  20. from os.path import realpath, dirname
  21. sys.path.append(realpath(dirname(realpath(__file__)) + '/../'))
  22. # set Unix thread name
  23. try:
  24. import setproctitle
  25. except ImportError:
  26. pass
  27. else:
  28. import threading
  29. old_thread_init = threading.Thread.__init__
  30. def new_thread_init(self, *args, **kwargs):
  31. old_thread_init(self, *args, **kwargs)
  32. setproctitle.setthreadtitle(self._name)
  33. threading.Thread.__init__ = new_thread_init
  34. import hashlib
  35. import hmac
  36. import json
  37. import os
  38. import httpx
  39. from searx import logger
  40. logger = logger.getChild('webapp')
  41. from datetime import datetime, timedelta
  42. from time import time
  43. from html import escape
  44. from io import StringIO
  45. import urllib
  46. from urllib.parse import urlencode, urlparse
  47. from pygments import highlight
  48. from pygments.lexers import get_lexer_by_name
  49. from pygments.formatters import HtmlFormatter # pylint: disable=no-name-in-module
  50. from werkzeug.middleware.proxy_fix import ProxyFix
  51. from flask import (
  52. Flask, request, render_template, url_for, Response, make_response,
  53. redirect, send_from_directory
  54. )
  55. from babel.support import Translations
  56. import flask_babel
  57. from flask_babel import Babel, gettext, format_date, format_decimal
  58. from flask.ctx import has_request_context
  59. from flask.json import jsonify
  60. from searx import brand, static_path
  61. from searx import settings, searx_dir, searx_debug
  62. from searx.exceptions import SearxParameterException
  63. from searx.engines import (
  64. categories, engines, engine_shortcuts, get_engines_stats
  65. )
  66. from searx.webutils import (
  67. UnicodeWriter, highlight_content, get_resources_directory,
  68. get_static_files, get_result_templates, get_themes,
  69. prettify_url, new_hmac, is_flask_run_cmdline
  70. )
  71. from searx.webadapter import get_search_query_from_webapp, get_selected_categories
  72. from searx.utils import html_to_text, gen_useragent, dict_subset, match_language
  73. from searx.version import VERSION_STRING
  74. from searx.languages import language_codes as languages
  75. from searx.search import SearchWithPlugins, initialize as search_initialize
  76. from searx.search.checker import get_result as checker_get_result
  77. from searx.query import RawTextQuery
  78. from searx.autocomplete import search_autocomplete, backends as autocomplete_backends
  79. from searx.plugins import plugins
  80. from searx.plugins.oa_doi_rewrite import get_doi_resolver
  81. from searx.preferences import Preferences, ValidationException, LANGUAGE_CODES
  82. from searx.answerers import answerers
  83. from searx.network import stream as http_stream
  84. from searx.answerers import ask
  85. from searx.metrology.error_recorder import errors_per_engines
  86. from searx.settings_loader import get_default_settings_path
  87. # serve pages with HTTP/1.1
  88. from werkzeug.serving import WSGIRequestHandler
  89. WSGIRequestHandler.protocol_version = "HTTP/{}".format(settings['server'].get('http_protocol_version', '1.0'))
  90. # check secret_key
  91. if not searx_debug and settings['server']['secret_key'] == 'ultrasecretkey':
  92. logger.error('server.secret_key is not changed. Please use something else instead of ultrasecretkey.')
  93. exit(1)
  94. # about static
  95. static_path = get_resources_directory(searx_dir, 'static', settings['ui']['static_path'])
  96. logger.debug('static directory is %s', static_path)
  97. static_files = get_static_files(static_path)
  98. # about templates
  99. default_theme = settings['ui']['default_theme']
  100. templates_path = get_resources_directory(searx_dir, 'templates', settings['ui']['templates_path'])
  101. logger.debug('templates directory is %s', templates_path)
  102. themes = get_themes(templates_path)
  103. result_templates = get_result_templates(templates_path)
  104. global_favicons = []
  105. for indice, theme in enumerate(themes):
  106. global_favicons.append([])
  107. theme_img_path = os.path.join(static_path, 'themes', theme, 'img', 'icons')
  108. for (dirpath, dirnames, filenames) in os.walk(theme_img_path):
  109. global_favicons[indice].extend(filenames)
  110. # Flask app
  111. app = Flask(
  112. __name__,
  113. static_folder=static_path,
  114. template_folder=templates_path
  115. )
  116. app.jinja_env.trim_blocks = True
  117. app.jinja_env.lstrip_blocks = True
  118. app.jinja_env.add_extension('jinja2.ext.loopcontrols') # pylint: disable=no-member
  119. app.secret_key = settings['server']['secret_key']
  120. # see https://flask.palletsprojects.com/en/1.1.x/cli/
  121. # True if "FLASK_APP=searx/webapp.py FLASK_ENV=development flask run"
  122. flask_run_development = \
  123. os.environ.get("FLASK_APP") is not None\
  124. and os.environ.get("FLASK_ENV") == 'development'\
  125. and is_flask_run_cmdline()
  126. # True if reload feature is activated of werkzeug, False otherwise (including uwsgi, etc..)
  127. # __name__ != "__main__" if searx.webapp is imported (make test, make docs, uwsgi...)
  128. # see run() at the end of this file : searx_debug activates the reload feature.
  129. werkzeug_reloader = flask_run_development or (searx_debug and __name__ == "__main__")
  130. # initialize the engines except on the first run of the werkzeug server.
  131. if not werkzeug_reloader\
  132. or (werkzeug_reloader and os.environ.get("WERKZEUG_RUN_MAIN") == "true"):
  133. search_initialize(enable_checker=True, check_network=True)
  134. babel = Babel(app)
  135. rtl_locales = ['ar', 'arc', 'bcc', 'bqi', 'ckb', 'dv', 'fa', 'fa_IR', 'glk', 'he',
  136. 'ku', 'mzn', 'pnb', 'ps', 'sd', 'ug', 'ur', 'yi']
  137. ui_locale_codes = [l.replace('_', '-') for l in settings['locales'].keys()]
  138. # used when translating category names
  139. _category_names = (gettext('files'),
  140. gettext('general'),
  141. gettext('music'),
  142. gettext('social media'),
  143. gettext('images'),
  144. gettext('videos'),
  145. gettext('it'),
  146. gettext('news'),
  147. gettext('map'),
  148. gettext('onions'),
  149. gettext('science'))
  150. _flask_babel_get_translations = flask_babel.get_translations
  151. # monkey patch for flask_babel.get_translations
  152. def _get_translations():
  153. if has_request_context() and request.form.get('use-translation') == 'oc':
  154. babel_ext = flask_babel.current_app.extensions['babel']
  155. return Translations.load(next(babel_ext.translation_directories), 'oc')
  156. return _flask_babel_get_translations()
  157. flask_babel.get_translations = _get_translations
  158. def _get_browser_or_settings_language(request, lang_list):
  159. for lang in request.headers.get("Accept-Language", "en").split(","):
  160. if ';' in lang:
  161. lang = lang.split(';')[0]
  162. if '-' in lang:
  163. lang_parts = lang.split('-')
  164. lang = "{}-{}".format(lang_parts[0], lang_parts[-1].upper())
  165. locale = match_language(lang, lang_list, fallback=None)
  166. if locale is not None:
  167. return locale
  168. return settings['search']['default_lang'] or 'en'
  169. @babel.localeselector
  170. def get_locale():
  171. if 'locale' in request.form\
  172. and request.form['locale'] in settings['locales']:
  173. # use locale from the form
  174. locale = request.form['locale']
  175. locale_source = 'form'
  176. elif request.preferences.get_value('locale') != '':
  177. # use locale from the preferences
  178. locale = request.preferences.get_value('locale')
  179. locale_source = 'preferences'
  180. else:
  181. # use local from the browser
  182. locale = _get_browser_or_settings_language(request, ui_locale_codes)
  183. locale = locale.replace('-', '_')
  184. locale_source = 'browser'
  185. # see _get_translations function
  186. # and https://github.com/searx/searx/pull/1863
  187. if locale == 'oc':
  188. request.form['use-translation'] = 'oc'
  189. locale = 'fr_FR'
  190. logger.debug(
  191. "%s uses locale `%s` from %s", urllib.parse.quote(request.url), locale, locale_source
  192. )
  193. return locale
  194. # code-highlighter
  195. @app.template_filter('code_highlighter')
  196. def code_highlighter(codelines, language=None):
  197. if not language:
  198. language = 'text'
  199. try:
  200. # find lexer by programing language
  201. lexer = get_lexer_by_name(language, stripall=True)
  202. except:
  203. # if lexer is not found, using default one
  204. logger.debug('highlighter cannot find lexer for {0}'.format(language))
  205. lexer = get_lexer_by_name('text', stripall=True)
  206. html_code = ''
  207. tmp_code = ''
  208. last_line = None
  209. # parse lines
  210. for line, code in codelines:
  211. if not last_line:
  212. line_code_start = line
  213. # new codeblock is detected
  214. if last_line is not None and\
  215. last_line + 1 != line:
  216. # highlight last codepart
  217. formatter = HtmlFormatter(linenos='inline',
  218. linenostart=line_code_start,
  219. cssclass="code-highlight")
  220. html_code = html_code + highlight(tmp_code, lexer, formatter)
  221. # reset conditions for next codepart
  222. tmp_code = ''
  223. line_code_start = line
  224. # add codepart
  225. tmp_code += code + '\n'
  226. # update line
  227. last_line = line
  228. # highlight last codepart
  229. formatter = HtmlFormatter(linenos='inline', linenostart=line_code_start, cssclass="code-highlight")
  230. html_code = html_code + highlight(tmp_code, lexer, formatter)
  231. return html_code
  232. # Extract domain from url
  233. @app.template_filter('extract_domain')
  234. def extract_domain(url):
  235. return urlparse(url)[1]
  236. def get_base_url():
  237. return url_for('index', _external=True)
  238. def get_current_theme_name(override=None):
  239. """Returns theme name.
  240. Checks in this order:
  241. 1. override
  242. 2. cookies
  243. 3. settings"""
  244. if override and (override in themes or override == '__common__'):
  245. return override
  246. theme_name = request.args.get('theme', request.preferences.get_value('theme'))
  247. if theme_name not in themes:
  248. theme_name = default_theme
  249. return theme_name
  250. def get_result_template(theme, template_name):
  251. themed_path = theme + '/result_templates/' + template_name
  252. if themed_path in result_templates:
  253. return themed_path
  254. return 'result_templates/' + template_name
  255. def url_for_theme(endpoint, override_theme=None, **values):
  256. if endpoint == 'static' and values.get('filename'):
  257. theme_name = get_current_theme_name(override=override_theme)
  258. filename_with_theme = "themes/{}/{}".format(theme_name, values['filename'])
  259. if filename_with_theme in static_files:
  260. values['filename'] = filename_with_theme
  261. url = url_for(endpoint, **values)
  262. return url
  263. def proxify(url):
  264. if url.startswith('//'):
  265. url = 'https:' + url
  266. if not settings.get('result_proxy'):
  267. return url
  268. url_params = dict(mortyurl=url.encode())
  269. if settings['result_proxy'].get('key'):
  270. url_params['mortyhash'] = hmac.new(settings['result_proxy']['key'],
  271. url.encode(),
  272. hashlib.sha256).hexdigest()
  273. return '{0}?{1}'.format(settings['result_proxy']['url'],
  274. urlencode(url_params))
  275. def image_proxify(url):
  276. if url.startswith('//'):
  277. url = 'https:' + url
  278. if not request.preferences.get_value('image_proxy'):
  279. return url
  280. if url.startswith('data:image/'):
  281. # 50 is an arbitrary number to get only the beginning of the image.
  282. partial_base64 = url[len('data:image/'):50].split(';')
  283. if len(partial_base64) == 2 \
  284. and partial_base64[0] in ['gif', 'png', 'jpeg', 'pjpeg', 'webp', 'tiff', 'bmp']\
  285. and partial_base64[1].startswith('base64,'):
  286. return url
  287. else:
  288. return None
  289. if settings.get('result_proxy'):
  290. return proxify(url)
  291. h = new_hmac(settings['server']['secret_key'], url.encode())
  292. return '{0}?{1}'.format(url_for('image_proxy'),
  293. urlencode(dict(url=url.encode(), h=h)))
  294. def get_translations():
  295. return {
  296. # when there is autocompletion
  297. 'no_item_found': gettext('No item found')
  298. }
  299. def render(template_name, override_theme=None, **kwargs):
  300. disabled_engines = request.preferences.engines.get_disabled()
  301. enabled_categories = set(category for engine_name in engines
  302. for category in engines[engine_name].categories
  303. if (engine_name, category) not in disabled_engines)
  304. if 'categories' not in kwargs:
  305. kwargs['categories'] = [x for x in
  306. _get_ordered_categories()
  307. if x in enabled_categories]
  308. if 'autocomplete' not in kwargs:
  309. kwargs['autocomplete'] = request.preferences.get_value('autocomplete')
  310. locale = request.preferences.get_value('locale')
  311. if locale in rtl_locales and 'rtl' not in kwargs:
  312. kwargs['rtl'] = True
  313. kwargs['searx_version'] = VERSION_STRING
  314. kwargs['method'] = request.preferences.get_value('method')
  315. kwargs['safesearch'] = str(request.preferences.get_value('safesearch'))
  316. kwargs['language_codes'] = languages
  317. if 'current_language' not in kwargs:
  318. kwargs['current_language'] = match_language(request.preferences.get_value('language'),
  319. LANGUAGE_CODES)
  320. # override url_for function in templates
  321. kwargs['url_for'] = url_for_theme
  322. kwargs['image_proxify'] = image_proxify
  323. kwargs['proxify'] = proxify if settings.get('result_proxy', {}).get('url') else None
  324. kwargs['opensearch_url'] = url_for('opensearch') + '?' \
  325. + urlencode({'method': kwargs['method'], 'autocomplete': kwargs['autocomplete']})
  326. kwargs['get_result_template'] = get_result_template
  327. kwargs['theme'] = get_current_theme_name(override=override_theme)
  328. kwargs['template_name'] = template_name
  329. kwargs['cookies'] = request.cookies
  330. kwargs['errors'] = request.errors
  331. kwargs['instance_name'] = settings['general']['instance_name']
  332. kwargs['results_on_new_tab'] = request.preferences.get_value('results_on_new_tab')
  333. kwargs['preferences'] = request.preferences
  334. kwargs['brand'] = brand
  335. kwargs['translations'] = json.dumps(get_translations(), separators=(',', ':'))
  336. kwargs['scripts'] = set()
  337. kwargs['endpoint'] = 'results' if 'q' in kwargs else request.endpoint
  338. for plugin in request.user_plugins:
  339. for script in plugin.js_dependencies:
  340. kwargs['scripts'].add(script)
  341. kwargs['styles'] = set()
  342. for plugin in request.user_plugins:
  343. for css in plugin.css_dependencies:
  344. kwargs['styles'].add(css)
  345. return render_template(
  346. '{}/{}'.format(kwargs['theme'], template_name), **kwargs)
  347. def _get_ordered_categories():
  348. ordered_categories = []
  349. if 'categories_order' not in settings['ui']:
  350. ordered_categories = ['general']
  351. ordered_categories.extend(x for x in sorted(categories.keys()) if x != 'general')
  352. return ordered_categories
  353. ordered_categories = settings['ui']['categories_order']
  354. ordered_categories.extend(x for x in sorted(categories.keys()) if x not in ordered_categories)
  355. return ordered_categories
  356. @app.before_request
  357. def pre_request():
  358. request.start_time = time()
  359. request.timings = []
  360. request.errors = []
  361. preferences = Preferences(themes, list(categories.keys()), engines, plugins)
  362. user_agent = request.headers.get('User-Agent', '').lower()
  363. if 'webkit' in user_agent and 'android' in user_agent:
  364. preferences.key_value_settings['method'].value = 'GET'
  365. request.preferences = preferences
  366. try:
  367. preferences.parse_dict(request.cookies)
  368. except:
  369. request.errors.append(gettext('Invalid settings, please edit your preferences'))
  370. # merge GET, POST vars
  371. # request.form
  372. request.form = dict(request.form.items())
  373. for k, v in request.args.items():
  374. if k not in request.form:
  375. request.form[k] = v
  376. if request.form.get('preferences'):
  377. preferences.parse_encoded_data(request.form['preferences'])
  378. else:
  379. try:
  380. preferences.parse_dict(request.form)
  381. except Exception:
  382. logger.exception('invalid settings')
  383. request.errors.append(gettext('Invalid settings'))
  384. # init search language and locale
  385. if not preferences.get_value("language"):
  386. preferences.parse_dict({"language": _get_browser_or_settings_language(request, LANGUAGE_CODES)})
  387. if not preferences.get_value("locale"):
  388. preferences.parse_dict({"locale": get_locale()})
  389. # request.user_plugins
  390. request.user_plugins = []
  391. allowed_plugins = preferences.plugins.get_enabled()
  392. disabled_plugins = preferences.plugins.get_disabled()
  393. for plugin in plugins:
  394. if ((plugin.default_on and plugin.id not in disabled_plugins)
  395. or plugin.id in allowed_plugins):
  396. request.user_plugins.append(plugin)
  397. @app.after_request
  398. def add_default_headers(response):
  399. # set default http headers
  400. for header, value in settings['server'].get('default_http_headers', {}).items():
  401. if header in response.headers:
  402. continue
  403. response.headers[header] = value
  404. return response
  405. @app.after_request
  406. def post_request(response):
  407. total_time = time() - request.start_time
  408. timings_all = ['total;dur=' + str(round(total_time * 1000, 3))]
  409. if len(request.timings) > 0:
  410. timings = sorted(request.timings, key=lambda v: v['total'])
  411. timings_total = ['total_' + str(i) + '_' + v['engine'] +
  412. ';dur=' + str(round(v['total'] * 1000, 3)) for i, v in enumerate(timings)]
  413. timings_load = ['load_' + str(i) + '_' + v['engine'] +
  414. ';dur=' + str(round(v['load'] * 1000, 3)) for i, v in enumerate(timings)]
  415. timings_all = timings_all + timings_total + timings_load
  416. response.headers.add('Server-Timing', ', '.join(timings_all))
  417. return response
  418. def index_error(output_format, error_message):
  419. if output_format == 'json':
  420. return Response(json.dumps({'error': error_message}),
  421. mimetype='application/json')
  422. elif output_format == 'csv':
  423. response = Response('', mimetype='application/csv')
  424. cont_disp = 'attachment;Filename=searx.csv'
  425. response.headers.add('Content-Disposition', cont_disp)
  426. return response
  427. elif output_format == 'rss':
  428. response_rss = render(
  429. 'opensearch_response_rss.xml',
  430. results=[],
  431. q=request.form['q'] if 'q' in request.form else '',
  432. number_of_results=0,
  433. base_url=get_base_url(),
  434. error_message=error_message,
  435. override_theme='__common__',
  436. )
  437. return Response(response_rss, mimetype='text/xml')
  438. else:
  439. # html
  440. request.errors.append(gettext('search error'))
  441. return render(
  442. 'index.html',
  443. selected_categories=get_selected_categories(request.preferences, request.form),
  444. )
  445. @app.route('/', methods=['GET', 'POST'])
  446. def index():
  447. """Render index page."""
  448. # UI
  449. advanced_search = request.preferences.get_value('advanced_search')
  450. # redirect to search if there's a query in the request
  451. if request.form.get('q'):
  452. query = ('?' + request.query_string.decode()) if request.query_string else ''
  453. return redirect(url_for('search') + query, 308)
  454. return render(
  455. 'index.html',
  456. selected_categories=get_selected_categories(request.preferences, request.form),
  457. advanced_search=advanced_search,
  458. )
  459. @app.route('/healthz', methods=['GET'])
  460. def health():
  461. return Response('OK', mimetype='text/plain')
  462. @app.route('/search', methods=['GET', 'POST'])
  463. def search():
  464. """Search query in q and return results.
  465. Supported outputs: html, json, csv, rss.
  466. """
  467. # output_format
  468. output_format = request.form.get('format', 'html')
  469. if output_format not in ['html', 'csv', 'json', 'rss']:
  470. output_format = 'html'
  471. # check if there is query (not None and not an empty string)
  472. if not request.form.get('q'):
  473. if output_format == 'html':
  474. return render(
  475. 'index.html',
  476. advanced_search=request.preferences.get_value('advanced_search'),
  477. selected_categories=get_selected_categories(request.preferences, request.form),
  478. )
  479. else:
  480. return index_error(output_format, 'No query'), 400
  481. # search
  482. search_query = None
  483. raw_text_query = None
  484. result_container = None
  485. try:
  486. search_query, raw_text_query, _, _ = get_search_query_from_webapp(request.preferences, request.form)
  487. # search = Search(search_query) # without plugins
  488. search = SearchWithPlugins(search_query, request.user_plugins, request)
  489. result_container = search.search()
  490. except SearxParameterException as e:
  491. logger.exception('search error: SearxParameterException')
  492. return index_error(output_format, e.message), 400
  493. except Exception as e:
  494. logger.exception('search error')
  495. return index_error(output_format, gettext('search error')), 500
  496. # results
  497. results = result_container.get_ordered_results()
  498. number_of_results = result_container.results_number()
  499. if number_of_results < result_container.results_length():
  500. number_of_results = 0
  501. # checkin for a external bang
  502. if result_container.redirect_url:
  503. return redirect(result_container.redirect_url)
  504. # Server-Timing header
  505. request.timings = result_container.get_timings()
  506. # output
  507. for result in results:
  508. if output_format == 'html':
  509. if 'content' in result and result['content']:
  510. result['content'] = highlight_content(escape(result['content'][:1024]), search_query.query)
  511. if 'title' in result and result['title']:
  512. result['title'] = highlight_content(escape(result['title'] or ''), search_query.query)
  513. else:
  514. if result.get('content'):
  515. result['content'] = html_to_text(result['content']).strip()
  516. # removing html content and whitespace duplications
  517. result['title'] = ' '.join(html_to_text(result['title']).strip().split())
  518. if 'url' in result:
  519. result['pretty_url'] = prettify_url(result['url'])
  520. # TODO, check if timezone is calculated right
  521. if result.get('publishedDate'): # do not try to get a date from an empty string or a None type
  522. try: # test if publishedDate >= 1900 (datetime module bug)
  523. result['pubdate'] = result['publishedDate'].strftime('%Y-%m-%d %H:%M:%S%z')
  524. except ValueError:
  525. result['publishedDate'] = None
  526. else:
  527. if result['publishedDate'].replace(tzinfo=None) >= datetime.now() - timedelta(days=1):
  528. timedifference = datetime.now() - result['publishedDate'].replace(tzinfo=None)
  529. minutes = int((timedifference.seconds / 60) % 60)
  530. hours = int(timedifference.seconds / 60 / 60)
  531. if hours == 0:
  532. result['publishedDate'] = gettext('{minutes} minute(s) ago').format(minutes=minutes)
  533. else:
  534. result['publishedDate'] = gettext('{hours} hour(s), {minutes} minute(s) ago').format(hours=hours, minutes=minutes) # noqa
  535. else:
  536. result['publishedDate'] = format_date(result['publishedDate'])
  537. if output_format == 'json':
  538. return Response(json.dumps({'query': search_query.query,
  539. 'number_of_results': number_of_results,
  540. 'results': results,
  541. 'answers': list(result_container.answers),
  542. 'corrections': list(result_container.corrections),
  543. 'infoboxes': result_container.infoboxes,
  544. 'suggestions': list(result_container.suggestions),
  545. 'unresponsive_engines': __get_translated_errors(result_container.unresponsive_engines)}, # noqa
  546. default=lambda item: list(item) if isinstance(item, set) else item),
  547. mimetype='application/json')
  548. elif output_format == 'csv':
  549. csv = UnicodeWriter(StringIO())
  550. keys = ('title', 'url', 'content', 'host', 'engine', 'score', 'type')
  551. csv.writerow(keys)
  552. for row in results:
  553. row['host'] = row['parsed_url'].netloc
  554. row['type'] = 'result'
  555. csv.writerow([row.get(key, '') for key in keys])
  556. for a in result_container.answers:
  557. row = {'title': a, 'type': 'answer'}
  558. csv.writerow([row.get(key, '') for key in keys])
  559. for a in result_container.suggestions:
  560. row = {'title': a, 'type': 'suggestion'}
  561. csv.writerow([row.get(key, '') for key in keys])
  562. for a in result_container.corrections:
  563. row = {'title': a, 'type': 'correction'}
  564. csv.writerow([row.get(key, '') for key in keys])
  565. csv.stream.seek(0)
  566. response = Response(csv.stream.read(), mimetype='application/csv')
  567. cont_disp = 'attachment;Filename=searx_-_{0}.csv'.format(search_query.query)
  568. response.headers.add('Content-Disposition', cont_disp)
  569. return response
  570. elif output_format == 'rss':
  571. response_rss = render(
  572. 'opensearch_response_rss.xml',
  573. results=results,
  574. answers=result_container.answers,
  575. corrections=result_container.corrections,
  576. suggestions=result_container.suggestions,
  577. q=request.form['q'],
  578. number_of_results=number_of_results,
  579. base_url=get_base_url(),
  580. override_theme='__common__',
  581. )
  582. return Response(response_rss, mimetype='text/xml')
  583. # HTML output format
  584. # suggestions: use RawTextQuery to get the suggestion URLs with the same bang
  585. suggestion_urls = list(map(lambda suggestion: {
  586. 'url': raw_text_query.changeQuery(suggestion).getFullQuery(),
  587. 'title': suggestion
  588. },
  589. result_container.suggestions))
  590. correction_urls = list(map(lambda correction: {
  591. 'url': raw_text_query.changeQuery(correction).getFullQuery(),
  592. 'title': correction
  593. },
  594. result_container.corrections))
  595. #
  596. return render(
  597. 'results.html',
  598. results=results,
  599. q=request.form['q'],
  600. selected_categories=search_query.categories,
  601. pageno=search_query.pageno,
  602. time_range=search_query.time_range,
  603. number_of_results=format_decimal(number_of_results),
  604. suggestions=suggestion_urls,
  605. answers=result_container.answers,
  606. corrections=correction_urls,
  607. infoboxes=result_container.infoboxes,
  608. engine_data=result_container.engine_data,
  609. paging=result_container.paging,
  610. unresponsive_engines=__get_translated_errors(result_container.unresponsive_engines),
  611. current_language=match_language(search_query.lang,
  612. LANGUAGE_CODES,
  613. fallback=request.preferences.get_value("language")),
  614. base_url=get_base_url(),
  615. theme=get_current_theme_name(),
  616. favicons=global_favicons[themes.index(get_current_theme_name())],
  617. timeout_limit=request.form.get('timeout_limit', None)
  618. )
  619. def __get_translated_errors(unresponsive_engines):
  620. translated_errors = set()
  621. for unresponsive_engine in unresponsive_engines:
  622. error_msg = gettext(unresponsive_engine[1])
  623. if unresponsive_engine[2]:
  624. error_msg = "{} {}".format(error_msg, unresponsive_engine[2])
  625. translated_errors.add((unresponsive_engine[0], error_msg))
  626. return translated_errors
  627. @app.route('/about', methods=['GET'])
  628. def about():
  629. """Render about page"""
  630. return render(
  631. 'about.html',
  632. )
  633. @app.route('/autocompleter', methods=['GET', 'POST'])
  634. def autocompleter():
  635. """Return autocompleter results"""
  636. # run autocompleter
  637. results = []
  638. # set blocked engines
  639. disabled_engines = request.preferences.engines.get_disabled()
  640. # parse query
  641. raw_text_query = RawTextQuery(request.form.get('q', ''), disabled_engines)
  642. sug_prefix = raw_text_query.getQuery()
  643. # normal autocompletion results only appear if no inner results returned
  644. # and there is a query part
  645. if len(raw_text_query.autocomplete_list) == 0 and len(sug_prefix) > 0:
  646. # get language from cookie
  647. language = request.preferences.get_value('language')
  648. if not language or language == 'all':
  649. language = 'en'
  650. else:
  651. language = language.split('-')[0]
  652. # run autocompletion
  653. raw_results = search_autocomplete(
  654. request.preferences.get_value('autocomplete'), sug_prefix, language
  655. )
  656. for result in raw_results:
  657. # attention: this loop will change raw_text_query object and this is
  658. # the reason why the sug_prefix was stored before (see above)
  659. results.append(raw_text_query.changeQuery(result).getFullQuery())
  660. if len(raw_text_query.autocomplete_list) > 0:
  661. for autocomplete_text in raw_text_query.autocomplete_list:
  662. results.append(raw_text_query.get_autocomplete_full_query(autocomplete_text))
  663. for answers in ask(raw_text_query):
  664. for answer in answers:
  665. results.append(str(answer['answer']))
  666. if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
  667. # the suggestion request comes from the searx search form
  668. suggestions = json.dumps(results)
  669. mimetype = 'application/json'
  670. else:
  671. # the suggestion request comes from browser's URL bar
  672. suggestions = json.dumps([sug_prefix, results])
  673. mimetype = 'application/x-suggestions+json'
  674. return Response(suggestions, mimetype=mimetype)
  675. @app.route('/preferences', methods=['GET', 'POST'])
  676. def preferences():
  677. """Render preferences page && save user preferences"""
  678. # save preferences
  679. if request.method == 'POST':
  680. resp = make_response(redirect(url_for('index', _external=True)))
  681. try:
  682. request.preferences.parse_form(request.form)
  683. except ValidationException:
  684. request.errors.append(gettext('Invalid settings, please edit your preferences'))
  685. return resp
  686. return request.preferences.save(resp)
  687. # render preferences
  688. image_proxy = request.preferences.get_value('image_proxy')
  689. disabled_engines = request.preferences.engines.get_disabled()
  690. allowed_plugins = request.preferences.plugins.get_enabled()
  691. # stats for preferences page
  692. stats = {}
  693. engines_by_category = {}
  694. for c in categories:
  695. engines_by_category[c] = []
  696. for e in categories[c]:
  697. if not request.preferences.validate_token(e):
  698. continue
  699. stats[e.name] = {'time': None,
  700. 'warn_timeout': False,
  701. 'warn_time': False}
  702. if e.timeout > settings['outgoing']['request_timeout']:
  703. stats[e.name]['warn_timeout'] = True
  704. stats[e.name]['supports_selected_language'] = _is_selected_language_supported(e, request.preferences)
  705. engines_by_category[c].append(e)
  706. # get first element [0], the engine time,
  707. # and then the second element [1] : the time (the first one is the label)
  708. for engine_stat in get_engines_stats(request.preferences)[0][1]:
  709. stats[engine_stat.get('name')]['time'] = round(engine_stat.get('avg'), 3)
  710. if engine_stat.get('avg') > settings['outgoing']['request_timeout']:
  711. stats[engine_stat.get('name')]['warn_time'] = True
  712. # end of stats
  713. locked_preferences = list()
  714. if 'preferences' in settings and 'lock' in settings['preferences']:
  715. locked_preferences = settings['preferences']['lock']
  716. return render('preferences.html',
  717. selected_categories=get_selected_categories(request.preferences, request.form),
  718. all_categories=_get_ordered_categories(),
  719. locales=settings['locales'],
  720. current_locale=request.preferences.get_value("locale"),
  721. image_proxy=image_proxy,
  722. engines_by_category=engines_by_category,
  723. stats=stats,
  724. answerers=[{'info': a.self_info(), 'keywords': a.keywords} for a in answerers],
  725. disabled_engines=disabled_engines,
  726. autocomplete_backends=autocomplete_backends,
  727. shortcuts={y: x for x, y in engine_shortcuts.items()},
  728. themes=themes,
  729. plugins=plugins,
  730. doi_resolvers=settings['doi_resolvers'],
  731. current_doi_resolver=get_doi_resolver(request.args, request.preferences.get_value('doi_resolver')),
  732. allowed_plugins=allowed_plugins,
  733. theme=get_current_theme_name(),
  734. preferences_url_params=request.preferences.get_as_url_params(),
  735. base_url=get_base_url(),
  736. locked_preferences=locked_preferences,
  737. preferences=True)
  738. def _is_selected_language_supported(engine, preferences):
  739. language = preferences.get_value('language')
  740. return (language == 'all'
  741. or match_language(language,
  742. getattr(engine, 'supported_languages', []),
  743. getattr(engine, 'language_aliases', {}), None))
  744. @app.route('/image_proxy', methods=['GET'])
  745. def image_proxy():
  746. url = request.args.get('url')
  747. if not url:
  748. return '', 400
  749. h = new_hmac(settings['server']['secret_key'], url.encode())
  750. if h != request.args.get('h'):
  751. return '', 400
  752. maximum_size = 5 * 1024 * 1024
  753. try:
  754. headers = dict_subset(request.headers, {'If-Modified-Since', 'If-None-Match'})
  755. headers['User-Agent'] = gen_useragent()
  756. stream = http_stream(
  757. method='GET',
  758. url=url,
  759. headers=headers,
  760. timeout=settings['outgoing']['request_timeout'],
  761. allow_redirects=True,
  762. max_redirects=20)
  763. resp = next(stream)
  764. content_length = resp.headers.get('Content-Length')
  765. if content_length and content_length.isdigit() and int(content_length) > maximum_size:
  766. return 'Max size', 400
  767. if resp.status_code == 304:
  768. return '', resp.status_code
  769. if resp.status_code != 200:
  770. logger.debug('image-proxy: wrong response code: {0}'.format(resp.status_code))
  771. if resp.status_code >= 400:
  772. return '', resp.status_code
  773. return '', 400
  774. if not resp.headers.get('content-type', '').startswith('image/'):
  775. logger.debug('image-proxy: wrong content-type: {0}'.format(resp.headers.get('content-type')))
  776. return '', 400
  777. headers = dict_subset(resp.headers, {'Content-Length', 'Length', 'Date', 'Last-Modified', 'Expires', 'Etag'})
  778. total_length = 0
  779. def forward_chunk():
  780. nonlocal total_length
  781. for chunk in stream:
  782. total_length += len(chunk)
  783. if total_length > maximum_size:
  784. break
  785. yield chunk
  786. return Response(forward_chunk(), mimetype=resp.headers['Content-Type'], headers=headers)
  787. except httpx.HTTPError:
  788. return '', 400
  789. @app.route('/stats', methods=['GET'])
  790. def stats():
  791. """Render engine statistics page."""
  792. if not settings['general'].get('enable_stats'):
  793. return page_not_found(None)
  794. stats = get_engines_stats(request.preferences)
  795. return render(
  796. 'stats.html',
  797. stats=stats,
  798. )
  799. @app.route('/stats/errors', methods=['GET'])
  800. def stats_errors():
  801. result = {}
  802. engine_names = list(errors_per_engines.keys())
  803. engine_names.sort()
  804. for engine_name in engine_names:
  805. error_stats = errors_per_engines[engine_name]
  806. sent_search_count = max(engines[engine_name].stats['sent_search_count'], 1)
  807. sorted_context_count_list = sorted(error_stats.items(), key=lambda context_count: context_count[1])
  808. r = []
  809. percentage_sum = 0
  810. for context, count in sorted_context_count_list:
  811. percentage = round(20 * count / sent_search_count) * 5
  812. percentage_sum += percentage
  813. r.append({
  814. 'filename': context.filename,
  815. 'function': context.function,
  816. 'line_no': context.line_no,
  817. 'code': context.code,
  818. 'exception_classname': context.exception_classname,
  819. 'log_message': context.log_message,
  820. 'log_parameters': context.log_parameters,
  821. 'percentage': percentage,
  822. })
  823. result[engine_name] = sorted(r, reverse=True, key=lambda d: d['percentage'])
  824. return jsonify(result)
  825. @app.route('/stats/checker', methods=['GET'])
  826. def stats_checker():
  827. result = checker_get_result()
  828. return jsonify(result)
  829. @app.route('/robots.txt', methods=['GET'])
  830. def robots():
  831. return Response("""User-agent: *
  832. Allow: /
  833. Allow: /about
  834. Disallow: /stats
  835. Disallow: /preferences
  836. Disallow: /*?*q=*
  837. """, mimetype='text/plain')
  838. @app.route('/opensearch.xml', methods=['GET'])
  839. def opensearch():
  840. method = 'post'
  841. if request.preferences.get_value('method') == 'GET':
  842. method = 'get'
  843. # chrome/chromium only supports HTTP GET....
  844. if request.headers.get('User-Agent', '').lower().find('webkit') >= 0:
  845. method = 'get'
  846. ret = render(
  847. 'opensearch.xml',
  848. opensearch_method=method,
  849. override_theme='__common__'
  850. )
  851. resp = Response(response=ret,
  852. status=200,
  853. mimetype="application/opensearchdescription+xml")
  854. return resp
  855. @app.route('/favicon.ico')
  856. def favicon():
  857. return send_from_directory(os.path.join(app.root_path,
  858. static_path,
  859. 'themes',
  860. get_current_theme_name(),
  861. 'img'),
  862. 'favicon.png',
  863. mimetype='image/vnd.microsoft.icon')
  864. @app.route('/clear_cookies')
  865. def clear_cookies():
  866. resp = make_response(redirect(url_for('index', _external=True)))
  867. for cookie_name in request.cookies:
  868. resp.delete_cookie(cookie_name)
  869. return resp
  870. @app.route('/config')
  871. def config():
  872. """Return configuration in JSON format."""
  873. _engines = []
  874. for name, engine in engines.items():
  875. if not request.preferences.validate_token(engine):
  876. continue
  877. supported_languages = engine.supported_languages
  878. if isinstance(engine.supported_languages, dict):
  879. supported_languages = list(engine.supported_languages.keys())
  880. _engines.append({
  881. 'name': name,
  882. 'categories': engine.categories,
  883. 'shortcut': engine.shortcut,
  884. 'enabled': not engine.disabled,
  885. 'paging': engine.paging,
  886. 'language_support': engine.language_support,
  887. 'supported_languages': supported_languages,
  888. 'safesearch': engine.safesearch,
  889. 'time_range_support': engine.time_range_support,
  890. 'timeout': engine.timeout
  891. })
  892. _plugins = []
  893. for _ in plugins:
  894. _plugins.append({'name': _.name, 'enabled': _.default_on})
  895. return jsonify({
  896. 'categories': list(categories.keys()),
  897. 'engines': _engines,
  898. 'plugins': _plugins,
  899. 'instance_name': settings['general']['instance_name'],
  900. 'locales': settings['locales'],
  901. 'default_locale': settings['ui']['default_locale'],
  902. 'autocomplete': settings['search']['autocomplete'],
  903. 'safe_search': settings['search']['safe_search'],
  904. 'default_theme': settings['ui']['default_theme'],
  905. 'version': VERSION_STRING,
  906. 'brand': {
  907. 'CONTACT_URL': brand.CONTACT_URL,
  908. 'GIT_URL': brand.GIT_URL,
  909. 'GIT_BRANCH': brand.GIT_BRANCH,
  910. 'DOCS_URL': brand.DOCS_URL
  911. },
  912. 'doi_resolvers': [r for r in settings['doi_resolvers']],
  913. 'default_doi_resolver': settings['default_doi_resolver'],
  914. })
  915. @app.errorhandler(404)
  916. def page_not_found(e):
  917. return render('404.html'), 404
  918. def run():
  919. logger.debug('starting webserver on %s:%s', settings['server']['bind_address'], settings['server']['port'])
  920. app.run(
  921. debug=searx_debug,
  922. use_debugger=searx_debug,
  923. port=settings['server']['port'],
  924. host=settings['server']['bind_address'],
  925. threaded=True,
  926. extra_files=[
  927. get_default_settings_path()
  928. ],
  929. )
  930. class ReverseProxyPathFix:
  931. '''Wrap the application in this middleware and configure the
  932. front-end server to add these headers, to let you quietly bind
  933. this to a URL other than / and to an HTTP scheme that is
  934. different than what is used locally.
  935. http://flask.pocoo.org/snippets/35/
  936. In nginx:
  937. location /myprefix {
  938. proxy_pass http://127.0.0.1:8000;
  939. proxy_set_header Host $host;
  940. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  941. proxy_set_header X-Scheme $scheme;
  942. proxy_set_header X-Script-Name /myprefix;
  943. }
  944. :param app: the WSGI application
  945. '''
  946. def __init__(self, app):
  947. self.app = app
  948. self.script_name = None
  949. self.scheme = None
  950. self.server = None
  951. if settings['server']['base_url']:
  952. # If base_url is specified, then these values from are given
  953. # preference over any Flask's generics.
  954. base_url = urlparse(settings['server']['base_url'])
  955. self.script_name = base_url.path
  956. if self.script_name.endswith('/'):
  957. # remove trailing slash to avoid infinite redirect on the index
  958. # see https://github.com/searx/searx/issues/2729
  959. self.script_name = self.script_name[:-1]
  960. self.scheme = base_url.scheme
  961. self.server = base_url.netloc
  962. def __call__(self, environ, start_response):
  963. script_name = self.script_name or environ.get('HTTP_X_SCRIPT_NAME', '')
  964. if script_name:
  965. environ['SCRIPT_NAME'] = script_name
  966. path_info = environ['PATH_INFO']
  967. if path_info.startswith(script_name):
  968. environ['PATH_INFO'] = path_info[len(script_name):]
  969. scheme = self.scheme or environ.get('HTTP_X_SCHEME', '')
  970. if scheme:
  971. environ['wsgi.url_scheme'] = scheme
  972. server = self.server or environ.get('HTTP_X_FORWARDED_HOST', '')
  973. if server:
  974. environ['HTTP_HOST'] = server
  975. return self.app(environ, start_response)
  976. application = app
  977. # patch app to handle non root url-s behind proxy & wsgi
  978. app.wsgi_app = ReverseProxyPathFix(ProxyFix(application.wsgi_app))
  979. if __name__ == "__main__":
  980. run()