Michael Christen 18053d6254 Merge pull request #775 from songproducer/fix/xss-reflected-input ...

fix: HTML-escape reflected user input and crawled document metadata to prevent XSS (#401, #630)

2026-05-25 22:01:16 +02:00

..

api

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

env

moved more servlets to new location

2022-10-02 22:57:58 +02:00

p2p

moved more servlets to new location

2022-10-02 22:57:58 +02:00

proxymsg

moved more servlets to new location

2022-10-02 22:57:58 +02:00

yacy

Add DNS/network errors (-1) to permanent error status codes

2026-01-21 23:46:43 +01:00

AccessGrid_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

AccessPicture_p.java

Enhanced fonts: new 6-Pixel font

2025-09-25 23:55:05 +02:00

AccessTracker_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

AILab.java

added skill configuration: we present llm tools as "Skills" and make

2026-02-08 21:44:04 +01:00

AIShield_p.java

added AIShield config page for chat access settings. Also added chat to top menu in case that was wanted by the user. Also added the AILab to the main menu.

2025-12-08 00:13:38 +01:00

autoconfig.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Autocrawl_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Automation_p.java

Renamed Table_API_p.html -> Automation_p.html

2026-02-09 23:54:34 +01:00

Banner.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Blacklist_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

BlacklistCleaner_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

BlacklistImpExp_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

BlacklistTest_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Blog.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

BlogComments.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Bookmarks.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CacheResource_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Collage.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

compare_yacy.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigAccountList_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigAccounts_p.java

removed concept of empty passwords as "no passwords used",

2023-10-25 22:56:06 +02:00

ConfigAppearance_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigBasic.java

fixed default pw comparison

2023-10-25 13:59:02 +02:00

ConfigHeuristics_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigHTCache_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigLanguage_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigNetwork_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigParser_p.java

code maintenance - removed warnings and replaced deprecated functions

2024-11-25 12:29:11 +01:00

ConfigPortal_p.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

ConfigPortal.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigProfile_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigProperties_p.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

ConfigRobotsTxt_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigSearchBox.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ConfigSearchPage_p.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

ConfigUpdate_p.java

enabling new update location release.yacy.net

2022-12-05 14:26:17 +01:00

ConfigUser_p.java

fix 3 javac warnings: redundant cast

2023-02-11 17:17:46 +02:00

Connections_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ContentAnalysis_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

ContentIntegrationPHPBB3_p.java

YaCy Index Pack Generator - refactoring of the SURROGATE process into a

2025-08-01 15:30:46 +09:00

CookieMonitorIncoming_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CookieMonitorOutgoing_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CookieTest_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CrawlCheck_p.java

implemented (most of)

2025-08-16 13:33:39 -06:00

Crawler_p.java

Automatically adjust crawling load limit to the local machine cpu cores

2024-11-25 00:30:36 +01:00

CrawlMonitorRemoteStart.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CrawlProfileEditor_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

CrawlResults.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

CrawlStartExpert.java

implemented (most of)

2025-08-16 13:33:39 -06:00

CrawlStartScanner_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

CrawlStartSite.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

cytag.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

DictionaryLoader_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

goto_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

Help.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

imagetest.java

refactoring PrintTool

2025-09-21 17:50:12 +02:00

index.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexBrowser_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

IndexControlRWIs_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexControlURLs_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexCreateLoaderQueue_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexCreateParserErrors_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

IndexCreateQueues_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexDeletion_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

IndexExport_p.java

YaCy Index Pack Generator - refactoring of the SURROGATE process into a

2025-08-01 15:30:46 +09:00

IndexExportImportSolr_p.java

YaCy Index Pack Generator - refactoring of the SURROGATE process into a

2025-08-01 15:30:46 +09:00

IndexFederated_p.java

Add DNS/network errors (-1) to permanent error status codes

2026-01-21 23:46:43 +01:00

IndexImportJsonList_p.java

code maintenance - removed warnings and replaced deprecated functions

2024-11-25 12:29:11 +01:00

IndexImportMediawiki_p.java

YaCy Index Pack Generator - refactoring of the SURROGATE process into a

2025-08-01 15:30:46 +09:00

IndexImportOAIPMH_p.java

YaCy Index Pack Generator - refactoring of the SURROGATE process into a

2025-08-01 15:30:46 +09:00

IndexImportOAIPMHList_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

IndexImportWarc_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

IndexImportZim_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

IndexPackDownloader_p.java

added YaCy Pack Downloader

2025-08-19 22:53:53 -07:00

IndexPackGenerator_p.java

replaced codex with regula

2026-01-08 20:23:57 +01:00

IndexPackManager_p.java

added delete button to pack manager

2025-08-17 23:00:18 -06:00

IndexReIndexMonitor_p.java

Persist recrawl job to restart on peer boot

2026-01-23 01:41:56 +01:00

IndexSchema_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

IndexShare_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

jslicense.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

LLMSelection_p.java

Add thinking/tooling/vision/format model capability tests and suppress thinking across LLM calls

2026-03-29 17:33:49 +02:00

Load_MediawikiWiki.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Load_PHPBB3.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Load_RSS_p.java

upgraded commons-lang to commons-lang to fix

2025-09-14 22:58:24 +02:00

mediawiki_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

Messages_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

MessageSend_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Network.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

NetworkHistory.java

enlarged by 20% also PerformaceGraph, ProfilingGraph

2025-09-21 22:41:57 +02:00

NetworkPicture.java

fix for NetworkPicture not giving away sync release

2026-02-08 13:34:17 +01:00

News.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

opensearchdescription.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

osm.java

refactoring PrintTool

2025-09-21 17:50:12 +02:00

PeerLoadPicture.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Performance_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

PerformanceConcurrency_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

PerformanceGraph.java

enlarged by 20% also PerformaceGraph, ProfilingGraph

2025-09-21 22:41:57 +02:00

PerformanceMemory_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

PerformanceQueues_p.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

PerformanceSearch_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ProxyIndexingMonitor_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

QuickCrawlLink_p.java

Fix for refactoring introduced in

2025-10-05 19:10:09 +02:00

RAGConfig_p.java

Add configurable maximum length for RAG search documents

2026-03-29 00:19:57 +01:00

RankingRWI_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

RankingSolr_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

rct_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

RegexTest.java

replaced http links with https

2024-07-21 18:02:58 +02:00

RemoteCrawl_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

robots.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

SearchAccessRate_p.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

SearchEventPicture.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ServerScannerList.java

replaced http links with https

2024-07-21 18:02:58 +02:00

Settings_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

SettingsAck_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

sharedBlacklist_p.java

fix: run blacklist import in background thread to avoid UI freeze (#625)

2026-04-20 23:21:53 +08:00

ssitestservlet.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Status.java

removed concept of empty passwords as "no passwords used",

2023-10-25 22:56:06 +02:00

Steering.java

fix https://github.com/yacy/yacy_search_server/commit/756c817b5a55b2253564083162ac946dd34deef7

2023-10-21 13:00:49 +02:00

suggest.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Supporter.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

Surftips.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

Table_RobotsTxt_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Tables_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

test.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Threaddump_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ToolsConfig_p.java

renamed skills -> tools

2026-03-24 00:22:03 +01:00

Trails.java

replaced http links with https

2024-07-21 18:02:58 +02:00

Translator_p.java

replaced http links with https

2024-07-21 18:02:58 +02:00

TransNews_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

User.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

VFS.java

added virtual file system that stores users data in the users browser

2026-02-10 14:29:12 +01:00

ViewFavicon.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ViewFile.java

fix: HTML-escape crawled document metadata in ViewFile parsed view to prevent XSS (#630)

2026-04-20 22:51:47 +08:00

ViewImage.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

ViewLog_p.java

increases log history length to 10000

2022-10-05 16:09:28 +02:00

ViewProfile.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

Vocabulary_p.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

WatchWebStructure_p.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

WebStructurePicture_p.java

Enhanced fonts: new 6-Pixel font

2025-09-25 23:55:05 +02:00

Wiki.java

enabling very large file uploads >2gb

2025-08-26 10:44:06 -07:00

WikiHelp.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

yacychat.java

Fix JS syntax error when system prompt contains single quotes

2026-04-22 11:23:44 +08:00

yacyinteractive.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

yacysearch_location.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

yacysearch.java

fix: HTML-escape prefermaskfilter in early-return path to prevent reflected XSS (#401)

2026-04-20 22:51:37 +08:00

yacysearchitem.java

Fix image preview licensing and show 20 images per page, fixes

2026-01-03 02:55:13 +01:00

yacysearchlatestinfo.java

possible fix for search-0-results bug from

2026-01-02 20:25:04 +01:00

yacysearchpagination.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

YaCySearchPluginFF.java

moved all remaining servlet classes to new location

2022-10-02 23:22:12 +02:00

yacysearchtrailer.java

added AIShield config page for chat access settings. Also added chat to top menu in case that was wanted by the user. Also added the AILab to the main menu.

2025-12-08 00:13:38 +01:00