Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-03-02 | * sanitize: never rewrite relative links to our own prefix | Andrew Dolgov | |
* use Config::get_self_url() instead of get_self_url_prefix() in a bunch of places | |||
2021-02-22 | migrate the rest into Config:: | Andrew Dolgov | |
2021-02-22 | wip: initial for config object | Andrew Dolgov | |
2021-02-19 | rename public.php/cached_url to cached | Andrew Dolgov | |
2021-02-15 | diskcache: unify naming | Andrew Dolgov | |
2021-02-08 | move some old-style handlers to new callback ones | Andrew Dolgov | |
2021-02-06 | fix some more warnings reported by phpstan | Andrew Dolgov | |
2021-01-15 | pluginhost: load plugin data automatically (also marks load_data method as ↵ | Andrew Dolgov | |
private) | |||
2020-11-04 | allow audio to be sent to client from the cache | John Aylward | |
2020-10-01 | hide uninteresting errors in several DOMDocument->loadHTML() invocations | Andrew Dolgov | |
2020-09-22 | remove a lot of stuff from global context (functions.php), add a few helper ↵ | Andrew Dolgov | |
classes instead | |||
2020-09-15 | af_proxy_http: never print received data directly, always redirect to cached_url | Andrew Dolgov | |
cache/getUrl: basename() passed filename just in case | |||
2020-09-14 | - fix multiple vulnerabilities in af_proxy_http | Andrew Dolgov | |
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions | |||
2020-06-15 | better support for image srcset attributes as discussed in ↵ | Andrew Dolgov | |
https://community.tt-rss.org/t/problem-with-img-srcset/3519 | |||
2020-05-12 | DiskCache: append fake file extension when sending cached files based on ↵ | Andrew Dolgov | |
mime type to make saving files easier | |||
2020-04-29 | DiskCache: properly deal with srcset attributes | Andrew Dolgov | |
2020-03-12 | add support for video[@src] in media cache | lllusion3418 | |
it's a valid alternative to a source[@src] child element: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/video | |||
2020-03-12 | fix url rewriting for videos with poster and src | lllusion3418 | |
if a poster attribute was present only that would have been rewritten and the (arguably more important) src attribute would be left as-is | |||
2019-08-15 | DiskCache::rewriteUrls() - remove img[@srcset] | Andrew Dolgov | |
2019-08-14 | consistency: use DiskCache->exists() to check for present files | Andrew Dolgov | |
2019-08-14 | DiskCache: more strict checking for input filenames, getUrl() is no longer ↵ | Andrew Dolgov | |
static | |||
2019-08-13 | * HOOK_ENCLOSURE_ENTRY: pass article_id to handler | Andrew Dolgov | |
* DiskCache: multiple fixes; support isWritable() for cache entries, set content-disposition for send() * public/cached_url: allow selecting files from sub-caches other than images * plugins/Cache_Starred_Images: rework to use DiskCache, can be enabled per-user, properly handles article enclosures, etc | |||
2019-08-13 | DiskCache::expire: support .no-auto-expiry to prevent automatic cache ↵ | Andrew Dolgov | |
maintenance | |||
2019-08-13 | expire_cached_files to DiskCache::expire() | Andrew Dolgov | |
2019-08-13 | move rewrite_cached_urls to DiskCache::rewriteUrls() | Andrew Dolgov | |
2019-08-13 | add DiskCache.getUrl() and use it in a bunch of places | Andrew Dolgov | |
2019-08-13 | add DiskCache.send; switch af_zz_imgproxy to use DiskCache | Andrew Dolgov | |
2019-08-13 | add DiskCache.isWritable | Andrew Dolgov | |
2019-08-13 | add classes/diskcache | Andrew Dolgov | |