FreshRSS (Customized)/p, branch 1.28.1-custom

Fix shortcut next unread article (#8466)

2026-01-25T12:57:20+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/8426 regression from https://github.com/FreshRSS/FreshRSS/pull/8057

fix validator url update (#8436)

2026-01-20T19:00:39+00:00

Closes https://github.com/FreshRSS/FreshRSS/issues/8435 Changes proposed in this pull request: - update validator links to use the same open-url handler with prefix + encoding - ensure the validator link reflects the current #url field value before opening - keep existing open-url behavior for other links unchanged How to test the feature manually: 1. Open feed edit (or add feed) form. 2. Change the feed URL in the URL field. 3. Click “Check the validity of the feed” and verify it opens the validator with the updated URL.

Update documentation in regards to CSP warnings (#8439)

2026-01-17T21:28:56+00:00

* Add a reference to the check where the warning is triggered Note: This is the place where the admin sees the browser pointing to. Adding this information here allows the admin to find the matching documentation entry. * Update Content-Security-Policy section of english ServerConfig documentation Note: This fixes some minor formating/typping issues and adds some clarity to the fact that this warning is also triggered on correctly configured hosts, simply due to the nature of how correctness of CSP rules are checked. * Move CSP infor source-code comment into console.info Note: Improve visibility of why this is happening. * Point towards static website documentation instead of git This URL should also remain more fixed even accross new branches/releases. Co-authored-by: Inverle * Minor fixes * Remove overwrite part --------- Co-authored-by: Inverle Co-authored-by: Alexandre Alapetite

Add remote user in Apache logs, also for API (#8392)

2026-01-03T16:48:33+00:00

* API: add remote user in Apache logs fix https://github.com/FreshRSS/FreshRSS/discussions/8385 Example: ``` 2026-01-01T18:38:28.645486326Z 0.0.0.0 - alex [01/Jan/2026:19:38:28 +0100] "GET /api/greader.php/reader/api/0/subscription/list?output=json HTTP/1.1" 200 9798 "-" "curl/8.14.1" ``` * Fallback mod_rewrite * Log remote user with same priority as FreshRSS_http_Util::httpAuthUser()

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03T15:52:33+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/8378

Change `Content-Disposition: inline` to `attachment` in `f.php` (#8344)

2025-12-24T20:35:34+00:00

Some [misconfigured instances](https://github.com/FreshRSS/FreshRSS/issues/7835) may be stripping out the CSP header that `f.php` sends, which can be mitigated by forcing the browser to download the image instead of displaying it and executing JS code from unsanitized SVGs for example. Contributes to https://github.com/FreshRSS/FreshRSS/pull/8263 and https://github.com/FreshRSS/FreshRSS/pull/7924 (improving security when CSP is not present)

Fix dropdown menus in sidebar going under the navigation bar (#8336)

2025-12-21T14:37:23+00:00

Missed in #8335 because I was testing without having the navigation bar enabled.

Display sidebar dropdowns above if no space below (#8335)

2025-12-21T13:02:27+00:00

Closes https://github.com/FreshRSS/FreshRSS/issues/7801

Rework encoding of search filters (#8324)

2025-12-17T09:07:52+00:00

Rework: * https://github.com/FreshRSS/FreshRSS/pull/8222 now that we have: * https://github.com/FreshRSS/FreshRSS/pull/8293 Follow-up of: * https://github.com/FreshRSS/FreshRSS/pull/8311 * More simplification * Deprecate getRawInput

Bump to API level 4 for Fever; add with_ids so we can mass-change rea… (#8312)

2025-12-16T07:36:29+00:00

* Bump to API level 4 for Fever; add with_ids so we can mass-change read/unread/saved/unsaved on lists of articles. As discussed in https://github.com/FreshRSS/FreshRSS/issues/8305 A small enhancement to the Fever API to vastly increase efficiency when bulk marking items. - How to test the feature manually: The client at: https://sources.vsta.org:7100/FeedMonkey/file?name=js/Fever.js&ci=tip has code to talk to this API enhancement (when the API level says it's supported). In particular walkArticles(). * Update indentation per PR check on Github * make fix-all * Line length * Fix many typing issues * is_numeric * Update comment --------- Co-authored-by: Andy Valencia Co-authored-by: Alexandre Alapetite