summaryrefslogtreecommitdiff
path: root/classes
AgeCommit message (Collapse)Author
2020-09-28update_rss_feed: fallback to previous method if passthru() is not availableAndrew Dolgov
2020-09-28validate url: feed urlencoded() URL to filter_var() onlyAndrew Dolgov
2020-09-28accept -1 as a valid exit code for per-feed update processesAndrew Dolgov
2020-09-28don't mention last_updated in non-zero failure error message because that's ↵Andrew Dolgov
not what it means
2020-09-28improve logging for per-feed update task failuresAndrew Dolgov
2020-09-27update_rss_feed: don't return as if failed on http 304Andrew Dolgov
2020-09-27update-feed: exit with non-zero exit code if update_rss_feed() failedAndrew Dolgov
daemon: log if per-feed update task terminated with non-zero exit code
2020-09-27lock per-feed update processes based on feed ID to reduce possibiltyAndrew Dolgov
of concurrent updates
2020-09-27update individual feed in a separate process to prevent PHP fatal errorsAndrew Dolgov
(for example, OOM) from stopping the entire batch this should also slightly increase memory budget for update processes
2020-09-25Merge branch 'master' of git.fakecake.org:tt-rssAndrew Dolgov
2020-09-25search_to_sql: use per-user default language instead of hardcoded english if ↵Andrew Dolgov
isn't specified explicitly
2020-09-23prev: add missing classAndrew Dolgov
2020-09-23move timestamp-related stuff to a separate classAndrew Dolgov
2020-09-22fix updater never scheduling feeds for update if they never been updated ↵Andrew Dolgov
before while having default update interval set
2020-09-22another hack for validation of URLs with invalid charactersAndrew Dolgov
2020-09-22validate URLs: convert IDN to punycode before passing URL to filter_var()Andrew Dolgov
2020-09-22use self:: in some places to invoke static methods from the same classAndrew Dolgov
2020-09-22- don't fail on non-ascii characters when validating URLsAndrew Dolgov
- fix IDN hostnames not being converted properly
2020-09-22fix previous re: resolve_redirectsAndrew Dolgov
2020-09-22remove a lot of stuff from global context (functions.php), add a few helper ↵Andrew Dolgov
classes instead
2020-09-21clarify some URL validation-related error messagesAndrew Dolgov
2020-09-21update_rss_feed: log effective URL after fetchingAndrew Dolgov
validate_url: treat scheme as case-insensitive
2020-09-19update URL pointing to version.jsonAndrew Dolgov
2020-09-18add basic safe mode which doesn't load any user pluginsAndrew Dolgov
2020-09-17replace FALSE with false so that static analyzer shuts up about itAndrew Dolgov
2020-09-17don't try to update manually disabled feeds even if they haven't been ↵Andrew Dolgov
updated before or are marked for a manual update
2020-09-17forgotpass: use type strict comparison for reset tokenAndrew Dolgov
2020-09-17fix several cases of Db class being invoked as wrong name (as DB)Andrew Dolgov
2020-09-17fix typo in previousAndrew Dolgov
2020-09-17fix OTP QR code not displayed because of CSRF token passed as a queryAndrew Dolgov
parameter use type-strict comparison when validating CSRF token on the backend
2020-09-16subscribe: allow pre-filling feed URL if passed via query stringAndrew Dolgov
2020-09-16pass CSRF token to opml import and feed icon replace dialogsAndrew Dolgov
2020-09-15editarticletags: load dialog via XHRAndrew Dolgov
2020-09-15handler: default base csrf_ignore() to falseAndrew Dolgov
2020-09-15backend handler: require CSRF, remove obsolete codeAndrew Dolgov
2020-09-15public/logout: require valid CSRF tokenAndrew Dolgov
2020-09-15Feeds: load quickaddfeed and search dialogs via XHR w/ CSRF protectionAndrew Dolgov
2020-09-15- backend: require CSRF token to be passed via POSTAndrew Dolgov
- do not leak CSRF token via GET request in feed debugger - rework Article/redirect to use POST
2020-09-15require CSRF token for Article/redirectAndrew Dolgov
2020-09-15- enable CSRF support earlierAndrew Dolgov
- remove rpc/sanityCheck from CSRF-excluded calls
2020-09-15af_proxy_http: never print received data directly, always redirect to cached_urlAndrew Dolgov
cache/getUrl: basename() passed filename just in case
2020-09-14user preferences: forbid < and > characters when changing passwords (were ↵Andrew Dolgov
silently stripped on save because of clean())
2020-09-14public/subscribe: require valid CSRF token when validating the formAndrew Dolgov
2020-09-14- fix multiple vulnerabilities in af_proxy_httpAndrew Dolgov
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions
2020-09-11order_to_override_query: allow HOOK_HEADLINES_CUSTOM_SORT_OVERRIDE plugins ↵Andrew Dolgov
to override built-in sorting
2020-08-29properly return counters for labels with zero assigned articlesAndrew Dolgov
refs https://community.tt-rss.org/t/label-counter-doesnt-update-when-count-goes-down-to-zero/3766
2020-08-14Silence php 7.2 error message generated in `session_set_cookie_params`.Rodney Stromlund
2020-08-13pluginhost: allow overriding default sort modes via ↵Andrew Dolgov
HOOK_HEADLINES_CUSTOM_SORT_MAP etc
2020-08-13move order_by to SQL override logic into a separate functionAndrew Dolgov
2020-08-11instead of taking batch timestamp and score (?) into account, make oldest ↵Andrew Dolgov
first sorting work consistently with newest first - i.e. rely on feed-provided timestamp
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-08 06:51:16 +0000