ce400f993c
httpx derives an "Authorization: Basic" header from the userinfo of a URL, so a user could make SearXNG send a header of their choosing to a host of their choosing (e.g. to probe an internal service behind basic auth). A user preference carrying credentials is now ignored and the administrator default is used instead; credentials in the configured base_url are untouched. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>