Welcome to the Kagi Search Issue Tracker!
We are grateful for you taking time to provide feedback and being part of our journey. This makes Kagi possible! 🙏
- 3
A malformed custom CSS script, mixed with the misconfigured CORS, could lead to javascript injection (security)
- AshH replied
- You can inject arbitrary HTML into the custom CSS script, which can allow you to include a script tag to include arbitrary javascript. While usually this would be blocked by CORS, a misconfiguration i...
- 3
"Control Center" should be renamed "Settings" be made more accessible.
- MalcolmCook replied
- The last item on the fly-out panel "Control Center" is "All Settings" which takes you to a tabbed display where all of the "Control Center" items appear again interspersed with many other items. This ...
- 5
Reviewing and changing personalized results boosted/blocked domains should be easy and natural
- Vlad replied
- One of Kagi's strongest promises is personalizing results. But these features not sufficiently visible or accessible. They should supported with a UX that makes managing boosted/blocked sites a near e...