Skip to content

v0.7.2

Compare
Choose a tag to compare
@benbusby benbusby released this 26 Apr 23:03
· 262 commits to main since this release
8a0b872

Features/Improvements

  • Build images now pushed to ghcr.io (still pushed to Docker Hub as usual)
  • Improved "minimal mode"
  • Public instances now accessible in machine readable format via misc/instances.txt
  • Fixed bugs w/ currency conversion
  • Upgraded Python image in Dockerfile to python:3.11.0a5-alpine
  • Updated ad filter
  • Switched to defusedxml for XML parsing
  • Added ability to enable frontend alternatives, but selectively keep the default frontend for specific services
    • For example, if site alts are enabled but you still want to visit youtube.com for YouTube results, set WHOOGLE_ALT_YT to an empty value (i.e. WHOOGLE_ALT_YT="" (all alt environment variables are documented in the README).
  • Updated all remaining frontend alternatives to be redirected through Farside by default
  • Fixed incorrect Chinese and Russian translations
  • Added Korean translations
  • Improved support for relative search results
    • Note: If you're hosting Whoogle behind a path such as mydomain.com/whoogle, you can now set WHOOGLE_URL_PREFIX to the path prefix (in this example, /whoogle)
  • Patched a minor vulnerability involving XSS on the Whoogle error template
    • Passing valid javascript within a tag (i.e. "<script>alert(document.domain)</script>") to the q param for the (now removed) /url endpoint caused the javascript to be executed. This has been fixed by restoring message sanitizing on the error template, as well as removing the unused /url endpoint which provided the only way of accessing the bug.
  • Added a (rough) implementation of Anonymous View
    • Available as a config setting or environment variable (WHOOGLE_CONFIG_ANON_VIEW)
    • Partially overrides the NoJS feature in order to keep result clutter to a minimum
      • NoJS View is now accessible only if both Anonymous View and NoJS are enabled in the config, since it uses the same endpoint as Anonymous View
    • This still has some issues to work through, but is available as a "beta" feature to test out now. Feel free to open an issue or reach out directly (or come to my Twitch stream) if you find a specific site that anonymous view doesn't work with, or otherwise find a bug with it in general.

Community Contributions

New Contributors

Full Changelog: v0.7.1...v0.7.2