Upstreaming #2809
History
Updated by GNUtoo almost 3 years ago
- Assignee set to GNUtoo
The SearX AUR package has several issues:
- There is a security issue: The default Searx configuration has a field with a passphrase/key that the user is supposed to change. The AUR package generates that key at build time. As users probably don't read the PKGBUILD, they are probably not aware of it. So if they share their package not knowing that, they might have some security issue.
- The license is AGPLv3 not AGPL
edit1: fix list formating