FreshRSS (Customized)/p/api/query.php, branch 1.28.1-custom

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03T15:52:33+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/8378

Rework encoding of search filters (#8324)

2025-12-17T09:07:52+00:00

Rework: * https://github.com/FreshRSS/FreshRSS/pull/8222 now that we have: * https://github.com/FreshRSS/FreshRSS/pull/8293 Follow-up of: * https://github.com/FreshRSS/FreshRSS/pull/8311 * More simplification * Deprecate getRawInput

Fix search encoding and quoting (#8311)

2025-12-13T10:31:34+00:00

Revised the encoding approach for searches: the HTML encoding is done just before its use for DB search. Fix also some cases with wrong quoting. Fix https://github.com/FreshRSS/FreshRSS/pull/8306#issuecomment-3643865439 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8293

Option to show user labels instead of tags in RSS share (#8112)

2025-10-14T13:43:43+00:00

* Option to show user labels instead of tags in RSS share fix https://github.com/FreshRSS/FreshRSS/discussions/8108#discussioncomment-14668813

Add option for CSP frame-ancestors (#7857)

2025-09-21T11:29:58+00:00

* Add option for CSP frame-ancestors https://github.com/FreshRSS/FreshRSS/discussions/7856 * Revert contentSelectorPreviewAction * Same for f.php and api * Fix double init in f.php * No sandbox for API page

Change how files are included (#7916)

2025-09-05T13:56:46+00:00

1. `include`, `include_once`, `require` and `require_once` are expressions not functions, parentheses are not necessary. 2. to move up the directory tree, it's better to use the `dirname` function instead of relying on `/..`.

Fixes for no-cache.txt (#7907)

2025-09-05T06:16:52+00:00

* Closes and fixes error from #7885 * `no-cache.txt` is now respected in `f.php`, `ext.php` and `serve` action in `extensionController` * And in all other places that weren't checking for `no-cache.txt` (some extensions maybe)

Put CSP everywhere (#7810)

2025-08-11T17:35:54+00:00

* Puts CSP everywhere in `p/api` * including the HTML query page ❗ * Also in `p/ext.php` * Puts `X-Content-Type-Options: nosniff` everywhere * Fixes custom icon configuration not showing `blob:` icon in statsController (idle feeds) * Also removes `style-src 'unsafe-inline'` since it doesn't seem to be needed * Improves CSP of `p/f.php` * Add `sandbox` directive

Fix HTML queries with a single feed (#7730)

2025-07-14T07:53:37+00:00

* Fix HTML queries with single feed * Suggestion

Fix regressions on some array structures (#7155)

2024-12-28T22:58:00+00:00

regressions from https://github.com/FreshRSS/FreshRSS/pull/7131 fix https://github.com/FreshRSS/FreshRSS/issues/7154