- fixed security issue with /xml/util/ynetSearch.xml

- hopefully fixed YaCy-UI local search with async=false for Ajax-request

git-svn-id: https://svn.berlios.de/svnroot/repos/yacy/trunk@5170 6c8d7289-2bf4-0310-a012-ef5d649a1542

htroot/xml/util/ynetSearch.java

@@ -48,6 +48,7 @@ public class ynetSearch {
     			if(post.containsKey("login")){
     				prop.put("AUTHENTICATE","admin log-in");
     			}
+    			return prop;
     		} else {
     			InputStream is = null;    			 
     			try {

htroot/yacy/ui/sidebar/sidebar_1.html

@@ -69,13 +69,9 @@
 		<br />
 		<label for="resource">Resource/Network:</label>
 		<br />		
-		<select name="resource" class="selector">
+		<select name="resource" class="selector">		
-		<!--
 			<option value="/yacysearch.rss?resource=global&verify=true" selected="selected">freeworld</option>
 			<option value="/yacysearch.rss?resource=local&verify=true" >local peer</option>
-		-->
-			<option value="/xml/util/ynetSearch.xml?login=&url=/yacysearch.rss?resource=global&verify=true" >this cluster</option>
-			<option value="/xml/util/ynetSearch.xml?login=&url=/yacysearch.rss?resource=local&verify=true" >this peer</option>
 			<option value="ymarks" >bookmarks</option>
 			<option value="/xml/util/ynetSearch.xml?login=&url=http://sciencenet.fzk.de:8080/yacysearch.rss?resource=global&verify=true" >sciencenet</option>
 		</select>

htroot/yacy/ui/yacyui-search.html

@@ -5,6 +5,7 @@
 		$.ajax({
 			type: "GET",
 			url: query,
+			async: false,
 			dataType: "xml",
 			success: function(xml) {				
 				if ($.browser.mozilla && ($.browser.version > 1.8)) {