Customized version of FreshRSS, a self-hosted RSS feed aggregator https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.24.3 2024-08-16T20:40:56+00:00 2024-08-16T20:40:56+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-08-16T20:40:56+00:00 urn:sha1:c480e571619c2e68000d85b866ef23c89ad83ddf fix https://github.com/FreshRSS/FreshRSS/issues/6717 2024-08-01T18:31:40+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-08-01T18:31:40+00:00 urn:sha1:d2247221bbf23a8fe19f66ea4ad7d0a59ffaa5b4 * Minor update whitespace PHPCS rules To simplify our configuration, apply more rules, and be clearer about what is added or removed compared with PSR12. Does not change our current conventions, but just a bit more consistent. * Forgotten *.phtml * Sort exclusion patterns + add a few for Extensions repo * Relaxed some rules 2024-06-09T18:32:12+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-06-09T18:32:12+00:00 urn:sha1:5b28a35003a015e29770094932157f13a3f7f5c0 * More PHPStan * More, passing * 4 more files * Update to PHPStan 1.11.4 Needed for fixed bug: Consider numeric-string types after string concat https://github.com/phpstan/phpstan/releases/tag/1.11.4 * Pass PHPStan level 9 Start tracking booleansInConditions * Fix mark as read * Fix doctype * ctype_digit 2024-05-25T16:27:12+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-05-25T16:27:12+00:00 urn:sha1:3cd90a2b1f1ad4f55b494de2019d2ed915bb79c6 fix https://github.com/FreshRSS/FreshRSS/issues/6491 Regression from https://github.com/FreshRSS/FreshRSS/pull/6177 2024-05-15T06:57:58+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-05-15T06:57:58+00:00 urn:sha1:2d17c020b6695d47debda065804db4e2d2f92e55 * PHPStan 1.11 + minor update dev dependencies https://github.com/phpstan/phpstan/releases/tag/1.11.0 * Comment style 2024-04-11T06:48:50+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-04-11T06:48:50+00:00 urn:sha1:7aaed6092f09b73b2deb7e32a1fed9b776c0202d * SimplePie strip iframe allow attribute https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#allow Besides security, the `allow autoplay` atttribute is especially problematic on mobile (Firefox on Android) as it asks to open the YouTube app as soon as the article is opened. Example of code before: ```html <iframe data-original="https://www.youtube.com/embed/??????feature=oembed" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="" sandbox="allow-scripts allow-same-origin"></iframe> ``` * Replace allow attribute * Allow more 2024-04-06T21:02:50+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-04-06T21:02:50+00:00 urn:sha1:e3c86a164d9903a99f10affae095f350e4075287 * HTTP Get allow UTF-8 even when charset is far from top fix https://github.com/FreshRSS/FreshRSS/issues/5586 The case was an HTML document with 15k whitespace then 1.2k of scripts before the `<meta charset="utf-8">` (far from the 1024 bytes suggested by the spec..., and too far for DOMDocument) * Rewording * Trim also vertical tab + comment 2024-03-10T22:04:17+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-03-10T22:04:17+00:00 urn:sha1:d0072b9fb73a6582c98c7b5a44daf2d6ca39636e * Refactor some cURL options and use CURLOPT_USERPWD fix https://github.com/FreshRSS/FreshRSS/issues/6176 * Fixes 2024-03-01T09:08:25+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-03-01T09:08:25+00:00 urn:sha1:5e54d5bc58dd815a84d12da1218c09e2c200b6eb `echo json_encode(...)` is very memory demanding for large responses, so optimised. Contributes to https://github.com/FreshRSS/FreshRSS/issues/6136 https://github.com/FreshRSS/FreshRSS/pull/6013#discussion_r1506779881 2024-02-18T09:53:44+00:00 Alexandre Alapetite alexandre@alapetite.fr 2024-02-18T09:53:44+00:00 urn:sha1:7d6a64a52243838e37ed47289b73574cfcd3b356 * Web scraping support encodings such as EUC-JP fix https://github.com/FreshRSS/FreshRSS/issues/6106 * Typo