summaryrefslogtreecommitdiff
path: root/include
AgeCommit message (Collapse)Author
2017-02-12Prevent target='_blank' vulnerability on dynamic linkJérémy DECOOL
2017-02-10use get_self_url_prefix() when rewriting cached imagesAndrew Dolgov
2017-02-10add some print_checkbox/print_button calls; rename some plugin preference ↵Andrew Dolgov
pane titles
2017-02-10af_zz_imgproxy: add optional setting to proxy all remote imagesAndrew Dolgov
functions: add some form helper methods
2017-02-10sanitize: properly handle cached content in archived articlesAndrew Dolgov
2017-02-09pass several image files used in notify messages to frontend as base64 to ↵Andrew Dolgov
prevent broken error messages in case network connection is down. also, update some close buttons to show correct cursor.
2017-02-08add some protection against opener attacks if external site is opened via ↵Andrew Dolgov
window.open()
2017-02-04image cache: do not try to cache data: schema urls; add caching of html5 ↵Andrew Dolgov
video content (similar to cache_starred_images plugin)
2017-02-04image cache: send files as content-disposition: attachment; add .png suffix ↵Andrew Dolgov
to image urls
2017-01-28subscribe dialog: do not report errors via alert()Andrew Dolgov
fetch_file_contents: reset all globals on start, return error message body when not using curl subscribe_to_feed: report if cloudflare is in the error message
2017-01-26add compact theme with smaller fontAndrew Dolgov
2017-01-25implement cache-busting for default theme.cssAndrew Dolgov
night theme: small fixes
2017-01-25pass article guid to hook_render_articleAndrew Dolgov
2017-01-24sanitize: allow dfn tagShane Synan
Add <dfn> tag to allowed tags list. <dfn> represents the defining instance of a term in HTML.
2017-01-24support rel=noopener for linksAndrew Dolgov
2017-01-24fetch_file_contents: rework the way shim works to prevent intermittent warningsAndrew Dolgov
2017-01-24sanitize: allow acronym tagAndrew Dolgov
2017-01-23reference pubsubhubbub classes using their namespaceAndrew Dolgov
2017-01-22feed tree: only run animation for appearing unread counters to prevent ↵Andrew Dolgov
clashes with aux counter updating and animations ending up in wrong state
2017-01-22bump VERSION_STATIC due to Dojo changesAndrew Dolgov
2017-01-22Merge branch 'af-comics-gocomics-feed' into 'master' Andrew Dolgov
Update af_comics plugin to support GoComics. Updates the af_comics plugin to support new GoComics site, which dropped native RSS feeds. See merge request !42
2017-01-22force ngettext() count argument type to stringAndrew Dolgov
2017-01-22Added support to fetch_file_contents() to explicitly set CURLOPT_FOLLOWLOCATION.JustAMacUser
2017-01-21lib: Upgrade php-subscriber from ??? to 1213f89 (2016-11-15)Anders Kaseorg
https://github.com/pubsubhubbub/php-subscriber Signed-off-by: Anders Kaseorg <[email protected]>
2017-01-21lib: Upgrade php-publisher from ??? to a5d6a0e (2016-11-15)Anders Kaseorg
https://github.com/pubsubhubbub/php-publisher Signed-off-by: Anders Kaseorg <[email protected]>
2017-01-17tweak the enclosure dropdown display a little bit for less-readable urlsAndrew Dolgov
2017-01-16Merge branch 'subscribe-idn-feed' into 'master' Andrew Dolgov
Subscribe to feed with Internationalized Domain Name Currently you cannot subscribe to feeds on hosts with internationalized domain names (IDNA) within tt-rss. You need to manually convert them to punycode to subscribe to them. This patch adds code to detect IDNA and convert them to punycode in fix_url() if possible on the system. This requires PHP IDN functions (e.g. on Debian Jessie this needs php5-intl to be installed), so a notice is added to the installer sanity check. See merge request !37
2017-01-07deprecate encrypted feed passwords because mcrypt is getting removed from ↵Andrew Dolgov
php 7.1 1. transparent decryption for existing installs stays for the time being 2. new passwords are not going to be encrypted even if FEED_CRYPT_KEY is defined 3. added update.php --decrypt-feeds to bulk decrypt existing encrypted passwords 4. updated install to not auto-generate crypt key 5. added warning to config.php-dist
2017-01-02convert to punycode for feed on idn hostnameBernhard Thaler
2016-11-30set_basic_feed_info: fix typoAndrew Dolgov
2016-11-30rssfuncs: fix warning when trying to update nonexisting feedAndrew Dolgov
2016-11-25maybe we shouldn't escape entry_author twiceAndrew Dolgov
2016-10-24fetch_file_contents: set timeout when not using CURLAndrew Dolgov
2016-10-19get_article_filters: add unicode modifier to preg_match()Andrew Dolgov
2016-09-21shared posts: remove link to feed in externally shared articles to prevent ↵Andrew Dolgov
leaking potentially private feed urls
2016-08-28Specify feed_id as an int rather than a string.John Brayton
2016-08-27Add feed_id to subscribeToFeed response when the code is 1 or 0.John Brayton
Set the API_LEVEL to 14.
2016-08-26better debugging for matched filter rulesAndrew Dolgov
2016-08-21remove support for legacy mysql driverAndrew Dolgov
2016-08-19import_export: better error message if upload failedAndrew Dolgov
2016-08-11perform housekeeping tasks for plugins loaded in user-context onlyAndrew Dolgov
2016-08-10bump static version to 16.8Andrew Dolgov
2016-08-07Merge branch 'more-info-article-filter' into 'master' Andrew Dolgov
Pass the value of cache_images to plugins in HOOK_ARTICLE_FILTER. Adds the `$cache_images` value to the `$article['feed']` array before calling HOOK_ARTICLE_FILTER. Allows plugins to know whether images will be cached in case they want to manage them in one way or another. See merge request !32
2016-08-06Pass the value of cache_images to plugins in HOOK_ARTICLE_FILTER.JustAMacUser
2016-08-06Remove href attribute if it executes JavaScript.JustAMacUser
2016-07-26Only strings need 4-byte filtering.JustAMacUser
2016-07-26add hotkey for toggling VFEED_GROUP_BY_FEED preferenceAndrew Dolgov
2016-07-07test if mb_internal_encoding() is available in functions.php headAndrew Dolgov
2016-04-29update_rss_feed: log warning when attempting to update unknown feedAndrew Dolgov
2016-04-29sanitize: force strip unnecessary data outside of <body>...</body> tags ↵Andrew Dolgov
generated by DOMDocument::saveHTML()