676c7303ca
add HOOK_ENCLOSURE_ENTRY for af_zz_imgproxy (2)
2017-02-12 17:02:07 +03:00
58210301e0
add HOOK_ENCLOSURE_ENTRY for af_zz_imgproxy
2017-02-12 16:01:28 +03:00
ba2853caac
Prevent target='_blank' vulnerability on dynamic link
2017-02-12 11:01:36 +01:00
fafd32e2dc
use get_self_url_prefix() when rewriting cached images
2017-02-10 15:14:47 +03:00
7818bfde0b
sanitize: properly handle cached content in archived articles
2017-02-10 12:11:09 +03:00
70c0a8c2e0
pass several image files used in notify messages to frontend as base64 to prevent broken error messages in case network connection is down. also, update some close buttons to show correct cursor.
2017-02-09 23:19:26 +03:00
829d478f1b
add some protection against opener attacks if external site is opened via window.open()
2017-02-08 15:07:05 +03:00
5edd605ae1
image cache: do not try to cache data: schema urls; add caching of html5 video content (similar to cache_starred_images plugin)
2017-02-04 11:50:01 +03:00
0442cbb6c1
image cache: send files as content-disposition: attachment; add .png suffix to image urls
2017-02-04 11:32:24 +03:00
181c8285dd
add compact theme with smaller font
2017-01-26 22:41:18 +03:00
e432b8fbe2
implement cache-busting for default theme.css
...
night theme: small fixes
2017-01-25 12:17:41 +03:00
553ec3c351
pass article guid to hook_render_article
2017-01-25 08:50:42 +03:00
311cdb27f4
sanitize: allow dfn tag
...
Add <dfn> tag to allowed tags list. <dfn> represents the defining
instance of a term in HTML.
2017-01-24 18:39:17 -06:00
3b001e4330
support rel=noopener for links
2017-01-24 18:45:25 +03:00
67268b0017
sanitize: allow acronym tag
2017-01-24 11:36:43 +03:00
967f0619c7
force ngettext() count argument type to string
2017-01-22 10:18:43 +03:00
c606bd5741
tweak the enclosure dropdown display a little bit for less-readable urls
2017-01-17 14:04:00 +03:00
62958fe9dc
convert to punycode for feed on idn hostname
2017-01-02 22:50:26 +01:00
6687cb9927
shared posts: remove link to feed in externally shared articles to prevent leaking potentially private feed urls
2016-09-21 09:39:31 +03:00
1a322ff3df
import_export: better error message if upload failed
2016-08-19 18:14:22 +03:00
d8b0f06705
Remove href attribute if it executes JavaScript.
2016-08-06 14:07:30 -04:00
64c24ecb59
add hotkey for toggling VFEED_GROUP_BY_FEED preference
2016-07-26 15:55:00 +03:00
42f78188d0
sanitize: force strip unnecessary data outside of <body>...</body> tags generated by DOMDocument::saveHTML()
2016-04-29 21:59:34 +03:00
465fb16d33
remove fetch_file_contents2, use a compat shim instead
2016-03-30 13:46:32 +03:00
633fb7ffe2
amend previous
2016-03-30 13:34:26 +03:00
79c891a8b7
set smallish timeout on update check, exclude update checking on initial load
2016-03-30 13:32:49 +03:00
7c0d68f207
remove dismiss* functions
2016-03-22 10:28:34 +03:00
94d425fe4a
rewrite_relative_url: only skip urls like magnet: instead of everything with :
2016-02-20 12:06:47 +03:00
7bbe94bc93
Revert "rewrite_relative_url: do not skip urls containing :"
...
This reverts commit a547fef6ab
2016-02-20 12:02:34 +03:00
a547fef6ab
rewrite_relative_url: do not skip urls containing :
2016-02-20 11:57:37 +03:00
a01bfd78c2
Remove srcset and sizes attributes from img tag if locally caching images.
2016-02-19 01:35:11 -05:00
50bda3fefb
sanitize: allow <xml:namespace> (thanks, livejournal)
2016-02-05 11:31:13 +03:00
71b75bb7fa
fix multiple issues with archived feeds
2016-01-26 19:03:05 +03:00
3b44aae0f3
sanitize: allow <description>
2016-01-23 02:17:00 +03:00
c352248651
get_article_tags: while getting tags from cache check if article entry actually exists
2016-01-14 12:12:35 +03:00
85d067e837
tag_is_valid: check numeric tags properly
2015-12-30 15:15:18 +03:00
a536f94c8d
sanitize: clear out @srcset/@sizes on images leading to http sites when running over https
2015-12-17 09:59:53 +03:00
19e47ad60b
queryFeedHeadlines: don't check first_id when sorting by oldest first
2015-11-21 22:20:00 +03:00
4c46702672
drop support for (obsolete, removed from recent php versions) php safe_mode setting
...
remove ugly hacks for curl + open_basedir combination breaking support for http redirects
2015-11-19 20:05:17 +03:00
389ae94a40
iframe_whitelisted: allow player.vimeo.com
2015-10-26 20:50:44 +03:00
9cc29abd41
queryFeedHeadlines: int_id was not included when browsing by tag which broke several button plugins
2015-10-08 10:08:51 +03:00
94b8ce6cec
queryfeedheadlines: remove disable_offsets hack
2015-09-15 12:33:58 +03:00
6b860bd9d2
recently read: limit query by last_read
2015-09-13 15:59:21 +03:00
08e79cb6b9
Fixed height/width image attributes for enclosures.
2015-08-23 13:08:48 -04:00
961cae85a4
Merge branch 'master' of git.fakecake.org:tt-rss
2015-08-17 07:55:44 +03:00
d5eaaa0508
curl: let's verify ssl peers
2015-08-17 07:53:50 +03:00
8493163576
Unset $retval after HOOK_FORMAT_ENCLOSURES.
...
Fixes an edge case where changing the array of enclosures with HOOK_FORMAT_ENCLOSURES might break the dropdown rendering if HOOK_RENDER_ENCLOSURE has no registered hooks.
2015-08-14 19:42:30 -04:00
28539f6aaf
search_to_sql: trim() input
2015-08-14 10:31:29 +03:00
dcbe36b2a2
fix some remaining old-style viewfeed() calls
2015-08-13 09:51:39 +03:00
6b0a17ad8b
viewfeed: switch to hash-based arguments
...
viewfeed: remove (obsolete) method parameter
add shortcut to debug viewfeed() query
2015-08-12 14:09:46 +03:00
Andrew Dolgov
Jérémy DECOOL
Andrew Dolgov
Shane Synan
Bernhard Thaler
JustAMacUser
Andrew Dolgov