FreshRSS (Customized)/app/Controllers, branch 1.26.3 Customized version of FreshRSS, a self-hosted RSS feed aggregator https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.26.3 2025-05-25T11:05:23+00:00 Fix remove last share (#7613) 2025-05-25T11:05:23+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-05-25T11:05:23+00:00 urn:sha1:62592da2837d21b84a4dc53272030d2a0df90224 fix https://github.com/FreshRSS/FreshRSS/issues/7612 Fix newest articles not shown (#7577) 2025-05-10T21:17:25+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-05-10T21:17:25+00:00 urn:sha1:532d229d3396817f702c1ecae79fb7f9bdad9a64 * Fix newest articles not shown Case when processing was faster than 1 second. fix https://github.com/FreshRSS/FreshRSS/issues/7412 Regression from https://github.com/FreshRSS/FreshRSS/pull/7149 * Simplify uTimeString() PHPStan has become a bit smarter Fix duplicate HTTP header for POST (#7556) 2025-05-05T16:55:43+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-05-05T16:55:43+00:00 urn:sha1:b2f80ad00a19e408685618668625ab11227cf18f Using POST with JSON would add `Content-Type: application/json` again and again everytime the feed's settings were saved Secure serving of user files from extensions (#7495) 2025-04-07T06:47:42+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-04-07T06:47:42+00:00 urn:sha1:0c33d2713957eaf6cc0222150df7ebbcb53beaed * Secure serving of user files from extensions fix https://github.com/FreshRSS/FreshRSS/issues/4930 * More fixes * Typo Use HTTP POST for logout (#7489) 2025-04-05T21:15:37+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-04-05T21:15:37+00:00 urn:sha1:d858053a7c70b3fee0fe407420ff8bd1466d5de2 * Use HTTP POST for logout To avoid potential CSRF risks * Fixed button font issue * Minor whitespace Catch extension exceptions in override (#7475) 2025-04-01T15:55:20+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-04-01T15:55:20+00:00 urn:sha1:3336631a846c2e34f55b2ecb76b46cd68228486f * Catch extension exceptions in override https://github.com/FreshRSS/Extensions/pull/300#issuecomment-2768578464 * Fix error message Make update URL readonly (#7477) 2025-04-01T15:54:52+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-04-01T15:54:52+00:00 urn:sha1:dbdadbb4107878d9233f635c31a88afe45957101 The security risks look higher than the minor convinience Modify https://github.com/FreshRSS/FreshRSS/pull/1024 Fix escaping of tag search (#7468) 2025-04-01T07:39:16+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-04-01T07:39:16+00:00 urn:sha1:d81dbc44b80c061bcea7efeb778be45082e1dcc6 * Fix escaping of tag search fix https://github.com/FreshRSS/FreshRSS/issues/7466 * Minor clarity Update bcrypt.js from 2.4.4 to 3.0.2 (#7449) 2025-03-25T09:19:51+00:00 Alexandre Alapetite alexandre@alapetite.fr 2025-03-25T09:19:51+00:00 urn:sha1:d0b961131939800a119801bfce7411ad2e429e9e https://github.com/dcodeIO/bcrypt.js/releases/tag/v3.0.0 Can be updated to the latest version with: `curl -L https://unpkg.com/bcryptjs/umd/index.js > p/scripts/vendor/bcrypt.js` Mark as read button: config for the size (#7314) 2025-03-13T22:10:48+00:00 maTh 1645099+math-GH@users.noreply.github.com 2025-03-13T22:10:48+00:00 urn:sha1:7de384bf9c192292cbc726085eedfadddfa7ca7d * settings * i18n: mark_read_button * big, small, none * fix * Fixes * make fix-all --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>