aboutsummaryrefslogtreecommitdiff
path: root/p/.htaccess
AgeCommit message (Collapse)Author
2026-01-03Add remote user in Apache logs, also for API (#8392)Gravatar Alexandre Alapetite
* API: add remote user in Apache logs fix https://github.com/FreshRSS/FreshRSS/discussions/8385 Example: ``` 2026-01-01T18:38:28.645486326Z 0.0.0.0 - alex [01/Jan/2026:19:38:28 +0100] "GET /api/greader.php/reader/api/0/subscription/list?output=json HTTP/1.1" 200 9798 "-" "curl/8.14.1" ``` * Fallback mod_rewrite * Log remote user with same priority as FreshRSS_http_Util::httpAuthUser()
2025-05-07Remove Apache 2.2 (only support Apache 2.4+) (#7561)Gravatar Alexandre Alapetite
Follow-up of https://github.com/FreshRSS/FreshRSS/pull/7552 I cannot find any distribution still supporting Apache 2.2
2025-05-07HTTP Cache-Control immutable (#7552)Gravatar Alexandre Alapetite
Start using `Cache-Control: immutable` for some resources served with a timestamp. https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cache-Control#immutable The `<If>` directive requires Apache 2.4+
2025-04-01Partial revert Referrer-Policy (#7478)Gravatar Alexandre Alapetite
https://github.com/FreshRSS/FreshRSS/pull/6303#issuecomment-2768907702 Was already implemented conditionally https://github.com/FreshRSS/FreshRSS/pull/1198
2025-04-01Referrer-Policy: same-origin (#6303)Gravatar maTh
* Referrer-Policy: same-origin * same-origin for our own images --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2025-03-13Add check for Apache mod_filter to ensure "AddOutputFilterByType" works. (#7419)Gravatar Dezponia
* Update .htaccess Add check for Apache mod_filter to ensure "AddOutputFilterByType" works. * Explicit enabling mod_filter in our Docker images --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2024-12-29Fix access to manifest (#7158)Gravatar Alexandre Alapetite
* Fix access to manifest fix https://github.com/FreshRSS/FreshRSS/issues/7157 * Casing
2024-12-27Hint .htaccess (#7153)Gravatar Alexandre Alapetite
https://github.com/FreshRSS/FreshRSS/discussions/7145
2024-11-19Rework Apache deny access outside p (#7008)Gravatar Alexandre Alapetite
* Rework Apache deny access outside p The deny rules introduced by https://github.com/FreshRSS/FreshRSS/pull/6881 gave problems for API access. See also https://github.com/FreshRSS/FreshRSS/discussions/6879 * Fix scope of deny logic * Fix scope of deny logic * Allow .txt For e.g. `robots.txt`
2024-10-13Apache allow OIDC (#6893)Gravatar Alexandre Alapetite
fix https://github.com/FreshRSS/FreshRSS/issues/6890 Fix regression from https://github.com/FreshRSS/FreshRSS/pull/6881
2024-10-11Apache protect more non-public folders and files (#6881)Gravatar Alexandre Alapetite
* Apache protect more non-public folders * Also protect root * Do the same for /p/ * Simplify Require all denied In case of Apache 2.2, it will just make an error 500 instead of 403 * .htaccess.dist * Simplify * Better comment
2023-11-01Fix Apache IfVersion (#5804)Gravatar Alexandre Alapetite
* Fix Apache IfVersion fix https://github.com/FreshRSS/FreshRSS/issues/5803 * Minor changelog
2023-10-31Document Apache 2.4+ (#5791)Gravatar Alexandre Alapetite
And avoid crash in Apache 2.2 anyway fix https://github.com/FreshRSS/FreshRSS/issues/5790
2023-07-30Rework trusted proxies (#5549)Gravatar Alexandre Alapetite
* Rework trusted proxies Fix https://github.com/FreshRSS/FreshRSS/issues/5502 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/3226 New environment variable `TRUSTED_PROXY`: set to 0 to disable, or to a list of trusted IP ranges compatible with https://httpd.apache.org/docs/current/mod/mod_remoteip.html#remoteiptrustedproxy New internal environment variable `CONN_REMOTE_ADDR` to remember the true IP address of the connection (e.g. last proxy), even when using mod_remoteip. Current working setups should not observe any significant change. * Minor whitespace * Safer trusted sources during install Rework of https://github.com/FreshRSS/FreshRSS/pull/5358 https://github.com/FreshRSS/FreshRSS/issues/5357 * Minor readme
2022-11-24Update mime type font/woff (#4894)Gravatar Alexandre Alapetite
* Update mime type font/woff https://www.rfc-editor.org/rfc/rfc8081 `application/font-woff*` is deprecated for `font/woff*` * Order
2021-12-21Fix: Compressed & Cached JS files (#4075)Gravatar maTh
* Update .htaccess * Explicit MIME type for .js https://developer.mozilla.org/en-US/docs/Learn/Server-side/Configuring_server_MIME_types https://www.iana.org/assignments/media-types/media-types.xhtml Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
2021-12-20Docker fix missing .htaccess (#4074)Gravatar Alexandre Alapetite
Related to https://github.com/FreshRSS/FreshRSS/issues/4073 In our Docker configuration, `.htaccess` files are included only once at startup. The one for themes was missing.
2019-11-05Cookie same-site (#2630)Gravatar Alexandre Alapetite
* Set-Cookie SameSite * https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-site-00 * https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-02#section-5.3.7 * https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/ * https://blog.chromium.org/2019/10/developers-get-ready-for-new.html Set to Lax instead of Strict to allow linking to allow linking to FreshRSS sub-pages without having to log-in again
2017-12-02Add more glyphs for opensans font (#1032)Gravatar Pavel Pletenev
* Add more glyphs for opensans font * Update .htaccess to support woff2 file format * Fixed browser support for new font face * Fixed Origine theme css and .htaccess * Deleted unneeded fonts * Added stylefiles for OpenSans font * Fixed all themes with new font css * Avoid additional CSS file * htaccess cache control public * Font casing bug * Remove TTF font Too big, low need https://caniuse.com/#search=woff * Changelog 1032 https://github.com/FreshRSS/FreshRSS/pull/1032 https://github.com/FreshRSS/FreshRSS/pull/1028
2016-03-08CSP for SVGGravatar Alexandre Alapetite
And moved .htaccess rules in the folder there are used https://github.com/FreshRSS/FreshRSS/issues/1114
2014-01-03.htaccess : pour les nouveaux fichiers HTML, ainsi que la nouvelle structure ↵Gravatar Alexandre Alapetite
./p./i/ Avec la nouvelle structure ./p/i/ , la racine ./p/ est sensée être publique, du coup pas de problème pour le favicon.ico par exemple.
2013-12-26Cookie : sous-répertoire pour index (changements de répertoires !)Gravatar Alexandre Alapetite
Implémente https://github.com/marienfressinaud/FreshRSS/issues/333 /public/ est renommé /p/ /public/index.php est déplacé dans /p/i/index.php Le cookie de session est limité à /p/i/
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-10 10:03:27 +0000