Markus Heiser

> This engine **REQUIRES** that searxng operate within a Mullvad VPN Is there anyone who can test this PR?

I think we waited long enough .. we trust in your code quality and if there should be an issue in practice Mullvad Leta users can open an issue.

🤔 thats an big issue .. the `https://www.chinaso.com/link?url=` individualize the request, redirect all real URLs and violate the privacy of SearXNG users ... thank you for the important hint. As...

May it can help: in the bing engine we have a similar issue, these bing URLs are base-64 encoded and we try to decode by this lines of code: https://github.com/searxng/searxng/blob/fd33559cfb623c1e9edef7ab08c1e9fbf43824f8/searx/engines/bing.py#L147-L158...

Yeah, lets try to find the [`WETTERVORHERSAGEBISKAYA` (weather forecast biskaya)](http://www.ellsbury.com/bombe1.htm) in the enigma message ;-) ``` $ curl -v 'https://www.chinaso.com/link?url=koWOJ%2Bfw4SmjW47R9tQkLFfT7IH1eQNAx2MYNdUsGYL%2FCW%2ByZjWoBtEENGLAYavH' 2>&1| grep Location < Location: https://finance.ifeng.com/c/8hgEqNl975s koWOJ%2Bfw4SmjW47R9tQkLFfT7IH1eQNAx2MYNdUsGYL%2FCW%2ByZjWoBtEENGLAYavH |--->|->|----------------------------------->|->|>|->|---------------> A B...

> code from 3 years ago about Bing that could help the ChinaSo engine: @dalf many thanks for the hint @BrandonStudio what @dalf suggested is to fire a request for...

> Since there's no code at the client for unparsing the URLs, it's possible that they encrypt and decrypt the URL with a secret key on server side That's what...

Yeah .. nice :-) .. but I suspect the assumption in the request is not correct .. ``` I have an encrypted text: koWOJ is https:// or https Bfw4SmjW47R9tQkLFfT7IH1eQNAx2MYNdUsGYL is...

> As for the privacy concern, in my case, the results of SearXNG would be sent to an LLM. :-) .. its one use case, but not the one SearXNG...

Does this issue exists any longer? .. I can't reproduce .. in the video from the opener JS is not enabled .. is there anything more we need to know...