FreshRSS (Customized)/app/Controllers, branch 1.27.0

Call cleanCache when refreshing feeds (#7827)

2025-08-15T07:37:00+00:00

Otherwise, it is only called when calling `httpGet()` which can be rare for users not using Web Scraping. https://github.com/FreshRSS/FreshRSS/discussions/7784#discussioncomment-14109207

Fix some PHP 8.5 deprecations (#7826)

2025-08-15T07:36:45+00:00

https://github.com/php/php-src/blob/php-8.5.0beta1/NEWS https://php.net/function.curl-close > This function has no effect. Prior to PHP 8.0.0, this function was used to close the resource.

Put CSP everywhere (#7810)

2025-08-11T17:35:54+00:00

* Puts CSP everywhere in `p/api` * including the HTML query page ❗ * Also in `p/ext.php` * Puts `X-Content-Type-Options: nosniff` everywhere * Fixes custom icon configuration not showing `blob:` icon in statsController (idle feeds) * Also removes `style-src 'unsafe-inline'` since it doesn't seem to be needed * Improves CSP of `p/f.php` * Add `sandbox` directive

Remove unneeded execution permissions (#7802)

2025-08-08T20:39:33+00:00

PHPStan: finalise strictArrayFilter (#7794)

2025-08-07T20:19:45+00:00

As well as reportPossiblyNonexistentConstantArrayOffset. And disable PHPStan-next from GitHub Action, since the work is completed for now.

Fix create user bugs (#7783)

2025-08-03T21:14:59+00:00

* Fix registration regression due to #7753 * Add missing access check

Redirect to the login page from bookmarklet instead of 403 (#7782)

2025-08-03T11:44:18+00:00

Makes it easier than having to sign in then go back to the website I clicked the bookmarklet on.

Rework fetch favicons (#7767)

2025-08-01T06:30:49+00:00

* Use main function `httpGet()` instead of local one; * Use HTTP cache, also between users; * Do not default to feed URL when there is no website URL TODO for later: consider supporting Atom's `` and RSS 2.0's `` https://github.com/FreshRSS/FreshRSS/issues/7774

Implement sudo mode / reauthentication (#7753)

2025-07-31T11:53:14+00:00

* Implement sudo mode / reauthentication * i18n: fr * generate flags * Improvements * Remove HMAC check * Don't require reauth to access logs when signed in as admin * Notify user of bad login via notification instead --------- Co-authored-by: Alexandre Alapetite

Add missing access checks for feed-related actions (#7768)

2025-07-31T11:48:42+00:00

* Add missing access checks for feed-related actions * fix whitespace