FreshRSS (Customized)/p/ext.php, branch 1.27.0

Put CSP everywhere (#7810)

2025-08-11T17:35:54+00:00

* Puts CSP everywhere in `p/api` * including the HTML query page ❗ * Also in `p/ext.php` * Puts `X-Content-Type-Options: nosniff` everywhere * Fixes custom icon configuration not showing `blob:` icon in statsController (idle feeds) * Also removes `style-src 'unsafe-inline'` since it doesn't seem to be needed * Improves CSP of `p/f.php` * Add `sandbox` directive

Fix file serving for symlinked extensions (#7545)

2025-05-02T07:47:57+00:00

* Fix file serving for symlinked extensions from ext.php * Don't resolve symlink when deleting extension * Minor syntax --------- Co-authored-by: Alexandre Alapetite

Fix regression ext.php (#7499)

2025-04-08T08:25:42+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/7498 Regression from https://github.com/FreshRSS/FreshRSS/pull/7495

Secure serving of user files from extensions (#7495)

2025-04-07T06:47:42+00:00

* Secure serving of user files from extensions fix https://github.com/FreshRSS/FreshRSS/issues/4930 * More fixes * Typo

Fix ext.php: Restrict valid paths in ext.php for extensions (#7479)

2025-04-01T17:13:27+00:00

* Fix ext.php: Restrict valid paths in ext.php for extensions Rework https://github.com/FreshRSS/FreshRSS/pull/7474 * Fix wrong variable

Restrict valid paths in ext.php for extensions (#7474)

2025-04-01T15:53:33+00:00

* Restrict valid paths in ext.php for extensions * Disallow absolute paths as well

Referrer-Policy: same-origin (#6303)

2025-04-01T10:23:56+00:00

* Referrer-Policy: same-origin * same-origin for our own images --------- Co-authored-by: Alexandre Alapetite

Upgrade code to php 8.1 (#6748)

2024-11-28T16:11:04+00:00

* revert Fix code indentation Fix code Upgrade code to php 8.1 * fix remarques * code review * code review * code review * Apply suggestions from code review * code review * Fixes * Many remainging updates of array syntax * Lost case 'reading-list' * Uneeded PHPDoc --------- Co-authored-by: Luc Sanchez Co-authored-by: Alexandre Alapetite

Upgrade to PHP 8.1 (#6711)

2024-09-06T07:06:46+00:00

* Upgrade to PHP 8.1 As discussed in https://github.com/FreshRSS/FreshRSS/discussions/5474 https://www.php.net/releases/8.0/en.php https://www.php.net/releases/8.1/en.php Upgrade to available native type declarations https://php.net/language.types.declarations Upgrade to https://phpunit.de/announcements/phpunit-10.html which requires PHP 8.1+ (good timing, as version 9 was not maintained anymore) Upgrade `:oldest` Docker dev image to oldest Alpine version supporting PHP 8.1: Alpine 3.16, which includes PHP 8.1.22. * Include 6736 https://github.com/FreshRSS/FreshRSS/pull/6736

Modernize code to php7.4 (#6043)

2024-06-05T20:04:06+00:00

* Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Modernize code to php7.4 * Consistency --------- Co-authored-by: Luc Co-authored-by: Alexandre Alapetite