FreshRSS (Customized)/p, branch edge

Add option to enable notifications (#8458)

2026-01-29T20:34:35+00:00

Closes https://github.com/FreshRSS/FreshRSS/issues/7330 - Default behavior is same - Added FreshRSS_Context::userConf()->html5_disable_notif so that, it determines weather user wants notification. (will not show any even it has permission) (i want default false so disable, so old configs get proper default values) - Added button such that checking it makes it request permission too - test notification actually happening (how can i trigger it, do i have to wait it), this code fixes permissions.

Rewrite setcookie using new syntax (#8447)

2026-01-28T07:21:25+00:00

Follow-up of https://github.com/FreshRSS/FreshRSS/pull/2630 now that we have PHP 7.3+ (even PHP 8.1+). * The new syntax natively supports `samesite`, and also avoids the need of re-setting all parameters. * Use automatic path instead of own function `getCookieDir()`. Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8446 * Sanitize lifetime of session cookies from PHP ini to avoid likely invalid/misunderstood values

Fix shortcut next unread article (#8466)

2026-01-25T12:57:20+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/8426 regression from https://github.com/FreshRSS/FreshRSS/pull/8057

fix validator url update (#8436)

2026-01-20T19:00:39+00:00

Closes https://github.com/FreshRSS/FreshRSS/issues/8435 Changes proposed in this pull request: - update validator links to use the same open-url handler with prefix + encoding - ensure the validator link reflects the current #url field value before opening - keep existing open-url behavior for other links unchanged How to test the feature manually: 1. Open feed edit (or add feed) form. 2. Change the feed URL in the URL field. 3. Click “Check the validity of the feed” and verify it opens the validator with the updated URL.

Update documentation in regards to CSP warnings (#8439)

2026-01-17T21:28:56+00:00

* Add a reference to the check where the warning is triggered Note: This is the place where the admin sees the browser pointing to. Adding this information here allows the admin to find the matching documentation entry. * Update Content-Security-Policy section of english ServerConfig documentation Note: This fixes some minor formating/typping issues and adds some clarity to the fact that this warning is also triggered on correctly configured hosts, simply due to the nature of how correctness of CSP rules are checked. * Move CSP infor source-code comment into console.info Note: Improve visibility of why this is happening. * Point towards static website documentation instead of git This URL should also remain more fixed even accross new branches/releases. Co-authored-by: Inverle * Minor fixes * Remove overwrite part --------- Co-authored-by: Inverle Co-authored-by: Alexandre Alapetite

Add remote user in Apache logs, also for API (#8392)

2026-01-03T16:48:33+00:00

* API: add remote user in Apache logs fix https://github.com/FreshRSS/FreshRSS/discussions/8385 Example: ``` 2026-01-01T18:38:28.645486326Z 0.0.0.0 - alex [01/Jan/2026:19:38:28 +0100] "GET /api/greader.php/reader/api/0/subscription/list?output=json HTTP/1.1" 200 9798 "-" "curl/8.14.1" ``` * Fallback mod_rewrite * Log remote user with same priority as FreshRSS_http_Util::httpAuthUser()

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03T15:52:33+00:00

fix https://github.com/FreshRSS/FreshRSS/issues/8378

Change `Content-Disposition: inline` to `attachment` in `f.php` (#8344)

2025-12-24T20:35:34+00:00

Some [misconfigured instances](https://github.com/FreshRSS/FreshRSS/issues/7835) may be stripping out the CSP header that `f.php` sends, which can be mitigated by forcing the browser to download the image instead of displaying it and executing JS code from unsanitized SVGs for example. Contributes to https://github.com/FreshRSS/FreshRSS/pull/8263 and https://github.com/FreshRSS/FreshRSS/pull/7924 (improving security when CSP is not present)

Fix dropdown menus in sidebar going under the navigation bar (#8336)

2025-12-21T14:37:23+00:00

Missed in #8335 because I was testing without having the navigation bar enabled.

Display sidebar dropdowns above if no space below (#8335)

2025-12-21T13:02:27+00:00

Closes https://github.com/FreshRSS/FreshRSS/issues/7801