FreshRSS (Customized)/app/FreshRSS.php, branch 1.3.2-beta Customized version of FreshRSS, a self-hosted RSS feed aggregator https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.3.2-beta 2016-04-29T16:24:46+00:00 Load styles for two JSON cases 2016-04-29T16:24:46+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-04-29T16:24:46+00:00 urn:sha1:6466fc87ece4c1fc6ee8ea5ea4d751d7ae266a2e Revert; Notifications needed also for non-layout requests 2016-04-23T21:12:08+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-04-23T21:12:08+00:00 urn:sha1:805ec6392c660641926f6a637b3c123dae528bc4 HTTP2 optimization 2016-04-23T17:10:32+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-04-23T17:10:32+00:00 urn:sha1:b042d3a7728037db90a9306c61091be0a8ac42c4 Fast flush HTTP headers, push promise CSS. Requires PHP 5.3+ due to anonymous function. Do not load syles, scripts, and notifications for Ajax requests. https://github.com/FreshRSS/FreshRSS/issues/1089 X-Content-Type-Options: nosniff 2016-03-08T17:28:04+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-03-08T17:28:04+00:00 urn:sha1:44be16d4fbc78c14f8ea17160585ed1bec0c8722 https://github.com/FreshRSS/FreshRSS/issues/1114 CSP compatibility with Firefox older than 45 2016-03-01T20:56:19+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-03-01T20:56:19+00:00 urn:sha1:cbac2afd23daaeeb3b5d6c81fdcd5c28619f5b1d https://github.com/FreshRSS/FreshRSS/pull/1075 https://github.com/FreshRSS/FreshRSS/pull/1078 https://developer.mozilla.org/en-US/Firefox/Releases/45#Security https://bugzilla.mozilla.org/show_bug.cgi?id=1045891 CSP different policies per controller 2016-02-21T20:25:23+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-02-21T20:25:23+00:00 urn:sha1:38c2d671e3480b8e9fb38491797e44fdea317006 https://github.com/FreshRSS/FreshRSS/issues/1075 CSP for statistics and forms 2016-02-21T18:15:23+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-02-21T18:15:23+00:00 urn:sha1:cb913a3a76daf357ad36ca39c26b4aaf800211d2 https://github.com/FreshRSS/FreshRSS/issues/1075 CSP: Use inline JSON instead of one-time cookie 2016-02-21T13:23:24+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-02-21T13:23:24+00:00 urn:sha1:e3dc7d46e15d97f8bd008acf3489d5e6c22b8daa Simpler, lighter https://github.com/FreshRSS/FreshRSS/issues/1075 CSP allow iframes 2016-02-17T00:17:56+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-02-17T00:17:56+00:00 urn:sha1:8cdf44c87b7490ebc4cbdf4f2c50dd2a3bdd520d E.g. for YouTube videos, etc. https://github.com/FreshRSS/FreshRSS/issues/1075 CSP no inline javascript draft 2016-02-16T22:53:39+00:00 Alexandre Alapetite alexandre@alapetite.fr 2016-02-16T22:53:39+00:00 urn:sha1:e4a459a6edc40b64cba7845b52f3e90666b2818a https://github.com/FreshRSS/FreshRSS/issues/1075