FreshRSS (Customized), branch 1.27.0Customized version of FreshRSS, a self-hosted RSS feed aggregatorhttps://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.27.02025-08-18T15:46:26+00:00Release 1.27.02025-08-18T15:46:26+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-18T15:46:26+00:00urn:sha1:66e2f00223b915c337291c0f34876d6390fb1c80
https://github.com/FreshRSS/FreshRSS/issues?q=is%3Aopen%20milestone%3A1.27.0
Changelog, credits2025-08-18T15:18:19+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-18T15:18:19+00:00urn:sha1:5a1f86b229d6eb7a21b7af7ed9f992dc4d1019e9Should be REMOTE_USER not Remote-User (#7828)2025-08-15T10:15:54+00:00triatic42704418+triatic@users.noreply.github.com2025-08-15T10:15:54+00:00urn:sha1:56df7f826a80de2c5f1c9c1a3b99fe38ea403d05
For fastcgi, REMOTE_USER is the correct variable.Call cleanCache when refreshing feeds (#7827)2025-08-15T07:37:00+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-15T07:37:00+00:00urn:sha1:ade9ba88178537a2181c9f27d23c69d6dedad34b
Otherwise, it is only called when calling `httpGet()` which can be rare for users not using Web Scraping.
https://github.com/FreshRSS/FreshRSS/discussions/7784#discussioncomment-14109207Fix some PHP 8.5 deprecations (#7826)2025-08-15T07:36:45+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-15T07:36:45+00:00urn:sha1:ddb9e91bf2b16aa6f31ebdb3a2119056e971ba96
https://github.com/php/php-src/blob/php-8.5.0beta1/NEWS
https://php.net/function.curl-close
> This function has no effect. Prior to PHP 8.0.0, this function was used to close the resource.
Minor change of signature on_http_response (#7825)2025-08-14T07:40:53+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-14T07:40:53+00:00urn:sha1:cc8afa77505fba66dc8f6de794228184c7e05e74
Follow-up of https://github.com/FreshRSS/FreshRSS/pull/7824Fix regression on_http_response (#7824)2025-08-14T07:35:30+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-14T07:35:30+00:00urn:sha1:531b9286d94f2f38e8725284bc2bd038f32d743e
Fix regression (bad merge) from https://github.com/FreshRSS/FreshRSS/pull/7775
* https://github.com/FreshRSS/simplepie/pull/50
Fix share XML encoding (#7822)2025-08-13T20:53:09+00:00Alexandre Alapetitealexandre@alapetite.fr2025-08-13T20:53:09+00:00urn:sha1:4ef52d682560e95fed3a718bec04437e86199e40
Maybe related to https://github.com/FreshRSS/FreshRSS/issues/7820Fix chart.js support for SeaMonkey (#7816)2025-08-11T19:23:50+00:00Inverleinverle@proton.me2025-08-11T19:23:50+00:00urn:sha1:18536409c02f38c6017ed5ca9a81aa84a0b5654b
SeaMonkey support was broken by #7752
Reproduce JS file:
```bash
git clone https://github.com/chartjs/Chart.js && \
cd Chart.js && \
git checkout tags/v4.5.0 && \
sed -i 's/es2022/es2021/g' rollup.config.js && \
pnpm install && \
pnpm run build && \
sha256sum dist/chart.umd.min.js
# SHA256 of dist/chart.umd.min.js should be: 311a5a5e0db077a787b782977f359a72f8584f94d800e324dcc6aefe8a006dd7
```
Put CSP everywhere (#7810)2025-08-11T17:35:54+00:00Inverleinverle@proton.me2025-08-11T17:35:54+00:00urn:sha1:7df6c201f2e6a6521d20718dfd8d9794c7437d1f
* Puts CSP everywhere in `p/api`
* including the HTML query page ❗
* Also in `p/ext.php`
* Puts `X-Content-Type-Options: nosniff` everywhere
* Fixes custom icon configuration not showing `blob:` icon in statsController (idle feeds)
* Also removes `style-src 'unsafe-inline'` since it doesn't seem to be needed
* Improves CSP of `p/f.php`
* Add `sandbox` directive