FreshRSS (Customized)/p/api, branch 1.27.0

Put CSP everywhere (#7810)

2025-08-11T17:35:54+00:00

* Puts CSP everywhere in `p/api` * including the HTML query page ❗ * Also in `p/ext.php` * Puts `X-Content-Type-Options: nosniff` everywhere * Fixes custom icon configuration not showing `blob:` icon in statsController (idle feeds) * Also removes `style-src 'unsafe-inline'` since it doesn't seem to be needed * Improves CSP of `p/f.php` * Add `sandbox` directive

GReader API: fix incorrect favicon URL (#7792)

2025-08-06T10:32:16+00:00

* GReader API: fix incorrect favicon URL * Fix compatibility with custom favicons --------- Co-authored-by: Alexandre Alapetite

WebSub: only perform a redirect when coming from WebSub (#7738)

2025-07-19T20:52:06+00:00

And add support for HTTP Link header for "self" URL Changing URL based on "self" URL will only be done when coming from a WebSub push fix https://github.com/FreshRSS/FreshRSS/issues/7737

Fix HTML queries with a single feed (#7730)

2025-07-14T07:53:37+00:00

* Fix HTML queries with single feed * Suggestion

API add support for states in `s` streamId (#7695)

2025-06-29T12:11:02+00:00

https://github.com/Ashinch/ReadYou/issues/1081#issuecomment-3009682580 Some other implementations allow `s` to target states: * https://www.inoreader.com/developers/stream-ids * https://github.com/theoldreader/api/blob/master/README.md#item-ids * https://feedhq.readthedocs.io/en/latest/api/reference.html#stream-items-ids I find this behaviour redundant with `it`, but for the sake of compatibility

Add API endpoint for extensions (#7576)

2025-06-02T22:16:17+00:00

* Add API endpoint for extensions Useful for https://github.com/FreshRSS/FreshRSS/issues/7572 * Support PATH_INFO Now also support being invoked like `/api/misc.php/Extension%20Name/` * More documentation

API fix default category (#7610)

2025-05-31T11:01:27+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/7368

Fix favicon hashing in GReader API (#7573)

2025-05-09T21:41:31+00:00

* Fix favicon hashing in GReader API (#7570) This allows the correct iconUrl to be returned from the GReader API for a given feed. * Fix method signature * Fix Fever API --------- Co-authored-by: CarelessCaution <189675655+CarelessCaution@users.noreply.github.com> Co-authored-by: Alexandre Alapetite

Fix API for labels with slash (#7437)

2025-03-22T22:16:59+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/7435

Reduce undeeded use of elvis operator ?: (#7204)

2025-01-10T07:13:09+00:00