Remove auth req for accessing opensearch
Requiring authentication for accessing the opensearch template prevents the browser from accessing the file when adding as a default search engine. This removes the authentication requirement from the opensearch route, which should never provide any sensitive information anyways.main
parent
36b350e1cd
commit
d146016860
|
@ -136,7 +136,6 @@ def index():
|
||||||
|
|
||||||
|
|
||||||
@app.route('/opensearch.xml', methods=['GET'])
|
@app.route('/opensearch.xml', methods=['GET'])
|
||||||
@auth_required
|
|
||||||
def opensearch():
|
def opensearch():
|
||||||
opensearch_url = g.app_location
|
opensearch_url = g.app_location
|
||||||
if opensearch_url.endswith('/'):
|
if opensearch_url.endswith('/'):
|
||||||
|
|
Loading…
Reference in New Issue