c3d14e1fa5
- fix multiple vulnerabilities in af_proxy_http
...
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
2020-09-14 19:46:52 +03:00
fdb1fc7608
get_version: fix commit/timestamp lost on subsequent invocations because of misbehaving caching
2019-12-20 18:17:05 +03:00
f30287be65
versioning changes
...
- remove VERSION_STATIC - https://community.tt-rss.org/t/versioning-changes-for-trunk/2974
- report git commit/timestamp properly by invoking git instead of trying to parse .git/HEAD etc
- remove git-related global constants used when checking for updates
2019-12-05 13:23:54 +03:00
3e4701116d
af_readability: add missing file
2019-08-16 15:29:24 +03:00
4edfb526e1
change version.json endpoint URL
2019-08-01 11:51:27 +03:00
3bd3324e5a
update: add option to send digests
2019-03-21 07:44:39 +03:00
0b74db5ad7
remove feedbrowser (other feeds)
2019-03-06 20:02:06 +03:00
38e01270d8
archived feeds: expire old entries (schema bump)
2019-03-06 19:06:05 +03:00
0517b88cce
rpc, catchupfeed: return counters immediately so that frontend can figure out next unread feed correctly
2019-01-03 10:47:41 +03:00
5c481fb249
rpc/checkforupdates: restrict to administrative access level
2018-12-16 19:08:41 +03:00
957c44d177
rework git update checking to be initiated by frontend, outside of runtime info output
2018-12-16 19:05:37 +03:00
b66deb3240
rpc/getAllCounters: return seq
2018-12-15 13:17:51 +03:00
d53cdaf815
requestCounters: remove cooldown
2018-12-12 20:06:44 +03:00
19e24b4fe2
force cast profile id to integer when assigning to session variable
2018-12-06 07:08:54 +03:00
c217de557f
rpc: addfeed: gets login and pass only if need_auth is checked.
...
Because of browser form auto-completion, the hidden field login and
password can be automatically filled when adding a feed. It would
enable feed authentication even if the user doesn't click on need_auth
button.
2018-01-14 20:55:39 +01:00
92175a8371
setpref: remove nl2br()
2017-12-04 08:27:25 +03:00
e6532439d6
force strip_tags() on all user input unless explicitly allowed
2017-12-03 23:35:38 +03:00
731ecac530
completeLabels: use prepare() not query()
2017-12-03 09:06:43 +03:00
b5bf9a0ff3
remove long forgotten stuff related to feed debugging actionbar
2017-12-02 15:12:39 +03:00
7039370368
pref-prefs: PDO
2017-12-02 12:01:56 +03:00
fbe7cb0a48
rpc: switch to PDO
2017-12-01 23:49:14 +03:00
5b6ea1ef91
remove pubsubhubbub: dead
2017-05-16 10:41:20 +03:00
e6c886bf66
wrap rssfuncs into rssutils class
2017-05-05 18:10:07 +03:00
65af3b2cbb
move counter stuff to a separate class
2017-05-05 11:54:31 +03:00
aeb1abedb2
move a bunch of functions into Feeds/Article namespaces
...
+ static function catchupArticlesById($ids, $cmode, $owner_uid = false) {
+ static function getLastArticleId() {
+ static function queryFeedHeadlines($params) {
+ static function getParentCategories($cat, $owner_uid) {
+ static function getChildCategories($cat, $owner_uid) {
move the rest of functions2.php back to functions.php as it is of more manageable size, remove the former
2017-05-04 15:13:02 +03:00
a230bf88a9
move to Article:
...
+ static function purge_orphans($do_output = false) {
move to Feeds
+ static function getGlobalUnread($user_id = false) {
+ static function getCategoryTitle($cat_id) {
+ static function getLabelUnread($label_id, $owner_uid = false) {
2017-05-04 15:00:21 +03:00
86a8351ca2
move the following to Feeds:
...
+ static function catchup_feed($feed, $cat_view, $owner_uid = false, $mode = 'all', $search = false) {
+ static function getFeedArticles($feed, $is_cat = false, $unread_only = false,
+ static function subscribe_to_feed($url, $cat_id = 0,
+ static function getFeedIcon($id) {
+ static function getFeedTitle($id, $cat = false) {
+ static function getCategoryUnread($cat, $owner_uid = false) {
+ static function getCategoryChildrenUnread($cat, $owner_uid = false) {
2017-05-04 14:50:56 +03:00
ea79a0e033
remove some redundant php closing tags
2017-04-26 20:24:18 +03:00
7b55001eee
fix various issues reported by static analysis
...
update gitlab-ci config
2017-04-26 15:29:22 +03:00
337535416f
filter by search results while marking feed as read
2017-03-31 11:21:35 +03:00
270c0a00e5
improve JS error logging with additional stuff
2017-03-05 10:50:15 +03:00
cb3f877303
reference pubsubhubbub classes using their namespace
2017-01-23 08:20:46 +03:00
cfc2fe50cb
fix sql error when subscribing to a feed using feed archive
2016-07-05 11:48:36 +03:00
79c891a8b7
set smallish timeout on update check, exclude update checking on initial load
2016-03-30 13:32:49 +03:00
71b75bb7fa
fix multiple issues with archived feeds
2016-01-26 19:03:05 +03:00
9b736a20b3
do not automatically call cleanup_tags() in housekeeping tasks
2016-01-04 10:42:24 +03:00
86d07d367c
rpc, setpref: properly save settings to active profile
2015-09-26 17:31:53 +03:00
0e653f751e
Make _DISABLE_FEED_BROWSER also disable the updateFeedBrowser RPC
...
The undocumented _DISABLE_FEED_BROWSER option added in commit
c39befacb2
2015-05-21 23:53:58 -04:00
4a80c57c50
remove some unused code reported by phpmd
2014-02-19 15:42:52 +04:00
e1f1857d95
fix globalUpdateFeeds failing when no active session exists
2013-08-25 17:34:27 +04:00
113c3dec9e
make globalUpdateFeeds handler use simple update mechanism to prevent script timeouts
2013-07-24 12:55:10 +04:00
41a7a066ef
share: move unsharing all articles into the plugin
2013-07-11 14:11:41 +04:00
6f7798b643
Fixing bugs found by static analysis
2013-05-07 00:35:10 -07:00
e57a1507ae
do not use session cookie lifetime for additional cookies
2013-04-29 13:03:28 +04:00
6bfc97da86
add automatic timezone (based on client tz offset)
2013-04-26 10:31:57 +04:00
f66492d357
better javascript error reporting, save error reports in tt-rss log
2013-04-20 10:43:21 +04:00
52d88392da
move db-prefs to OO
2013-04-18 12:00:01 +04:00
d9c85e0f11
classes: use OO DB interface
2013-04-17 20:12:14 +04:00
a42c55f02b
fix blank character after opening bracket in function calls
2013-04-17 18:34:18 +04:00
6322ac79a0
remove $link
2013-04-17 16:48:41 +04:00
Andrew Dolgov
Colin Vidal
Andrew Dolgov
Anders Kaseorg
Andrew Dolgov
Andrew Dolgov
Rasmus Lerdorf