morty

Morty 作为服务的Web内容净化代理 Morty 重写网页以排除恶意 HTML 标签和属性。它还会替换外部资源引用以防止第三方信息泄露。 Morty 的主要目标是作为 searx 的结果代理提供，但它也可以作为独立的净化服务使用。 特性： HTML 净化 将 HTML/CSS 外部引用重写为本地引用 阻止 JavaScript 不转发 Cookie 不发送 Referer 无缓存/ETag 支持 GET/POST 表单和 IFrame 可选的 HMAC URL 验证密钥以防止服务滥用 安装和设置 要求：Go 版本 1.10 或更高。 root@kitploit: $ go get...

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

Resolution SillyTavern 1.18.0 added a generic server-side request filter Private Request Whitelisting. Since we expect users to use the application in a trusted environment, the filter is disabled by default, however it is strongly advised to be enabled and properly configured when an instance is...

NPM: SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

NPM: SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl vulnerability discovered by ? in WordPress Npm sillytavern versions = 1.17.0...

GHSA-QG89-QWWH-5F3J SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

Resolution SillyTavern 1.18.0 added a generic server-side request filter Private Request Whitelisting. Since we expect users to use the application in a trusted environment, the filter is disabled by default, however it is strongly advised to be enabled and properly configured when an instance is...