| 1 | # Morty
|
|---|
| 2 |
|
|---|
| 3 | [](https://travis-ci.org/asciimoo/morty)
|
|---|
| 4 | [](https://www.gnu.org/licenses/agpl-3.0)
|
|---|
| 5 | [](https://hub.docker.com/r/dalf/morty)
|
|---|
| 6 |
|
|---|
| 7 | Web content sanitizer proxy as a service
|
|---|
| 8 |
|
|---|
| 9 | Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks.
|
|---|
| 10 |
|
|---|
| 11 | The main goal of morty is to provide a result proxy for [searx](https://asciimoo.github.com/searx/), but it can be used as a standalone sanitizer service too.
|
|---|
| 12 |
|
|---|
| 13 | Features:
|
|---|
| 14 |
|
|---|
| 15 | - HTML sanitization
|
|---|
| 16 | - Rewrites HTML/CSS external references to locals
|
|---|
| 17 | - JavaScript blocking
|
|---|
| 18 | - No Cookies forwarded
|
|---|
| 19 | - No Referrers
|
|---|
| 20 | - No Caching/Etag
|
|---|
| 21 | - Supports GET/POST forms and IFrames
|
|---|
| 22 | - Optional HMAC URL verifier key to prevent service abuse
|
|---|
| 23 |
|
|---|
| 24 |
|
|---|
| 25 | ## Installation and setup
|
|---|
| 26 | Requirement: Go version 1.10 or higher.
|
|---|
| 27 |
|
|---|
| 28 | ```
|
|---|
| 29 | $ go get github.com/asciimoo/morty
|
|---|
| 30 | $ "$GOPATH/bin/morty" --help
|
|---|
| 31 | ```
|
|---|
| 32 |
|
|---|
| 33 | ### Environment variables
|
|---|
| 34 |
|
|---|
| 35 | Morty can be configured using the following environment variables:
|
|---|
| 36 | - `MORTY_ADDRESS`: Listen address (default to `127.0.0.1:3000`)
|
|---|
| 37 | - `MORTY_KEY`: HMAC url validation key (base64 encoded) to prevent direct URL opening. Leave blank to disable validation. Use `openssl rand -base64 33` to generate.
|
|---|
| 38 | - `DEBUG`: Enable/disable proxy and redirection logs (default to `true`). Set to `false` to disable.
|
|---|
| 39 |
|
|---|
| 40 | ### Docker
|
|---|
| 41 |
|
|---|
| 42 | ```
|
|---|
| 43 | docker run -e DEBUG=false -e MORTY_ADDRESS=0.0.0.0:3000 -v ./rules.json:/etc/filtron/rules.json:rw dalf/morty
|
|---|
| 44 | ```
|
|---|
| 45 |
|
|---|
| 46 | ```
|
|---|
| 47 | docker run -e DEBUG=false -v ./rules.json:/etc/filtron/rules.json:rw dalf/morty -listen 0.0.0.0:3000
|
|---|
| 48 | ```
|
|---|
| 49 |
|
|---|
| 50 |
|
|---|
| 51 | ### Test
|
|---|
| 52 |
|
|---|
| 53 | ```
|
|---|
| 54 | $ cd "$GOPATH/src/github.com/asciimoo/morty"
|
|---|
| 55 | $ go test
|
|---|
| 56 | ```
|
|---|
| 57 |
|
|---|
| 58 |
|
|---|
| 59 | ### Benchmark
|
|---|
| 60 |
|
|---|
| 61 | ```
|
|---|
| 62 | $ cd "$GOPATH/src/github.com/asciimoo/morty"
|
|---|
| 63 | $ go test -benchmem -bench .
|
|---|
| 64 | ```
|
|---|
| 65 |
|
|---|
| 66 |
|
|---|
| 67 | ## Bugs
|
|---|
| 68 |
|
|---|
| 69 | Bugs or suggestions? Visit the [issue tracker](https://github.com/asciimoo/morty/issues).
|
|---|
