summaryrefslogtreecommitdiff
path: root/plugins
AgeCommit message (Collapse)Author
2021-01-07auth_remote: use empty() instead of isset() while checking headersAndrew Dolgov
2021-01-05fix auth_remote broken by previous commitAndrew Dolgov
2021-01-05auth_remote: rewrite header checking to be more readableAndrew Dolgov
2021-01-03af_redditimgur: also blacklist in-content linksAndrew Dolgov
2020-12-21Add support for HTTP_REMOTE_USER variable for user authenticationTony
2020-12-20af_redditimgur: also rewrite in the API handlerAndrew Dolgov
2020-12-20af_redditimgur: add option to rewrite reddit URLs to teddit.netAndrew Dolgov
2020-12-18redditimgur: blacklist github because it usually resolves to a huge profile ↵Andrew Dolgov
photo of someone
2020-12-12Address param order deprecation warning for 'af_redditimgur'.wn
2020-12-11- move sphinx plugin to a separate repoAndrew Dolgov
- regenerate config checks without sphinx-related variables
2020-12-11shorten_expanded: remove loading=lazy from images if enabledAndrew Dolgov
2020-11-26af_readability: allow appending to original summary instead of alwaysAndrew Dolgov
replacing it, some minor code cleanup
2020-10-11Ensure proxy_all setting is saved in database.JustAMacUser
2020-10-01hide uninteresting errors in several DOMDocument->loadHTML() invocationsAndrew Dolgov
2020-09-23move timestamp-related stuff to a separate classAndrew Dolgov
2020-09-22remove a lot of stuff from global context (functions.php), add a few helper ↵Andrew Dolgov
classes instead
2020-09-17replace FALSE with false so that static analyzer shuts up about itAndrew Dolgov
2020-09-17auth_internal: cast OTP code to integer before trying to check itAndrew Dolgov
2020-09-17* use get_random_bytes() for CSRF tokenAndrew Dolgov
* get_random_bytes: use PHP7 random_bytes() if it is available * validate CSRF token using hash_equals
2020-09-17auth_internal: use type-strict comparison when checking OTP codeAndrew Dolgov
2020-09-15af_proxy_http: require separate token to access imgproxyAndrew Dolgov
2020-09-15af_proxy_http: never print received data directly, always redirect to cached_urlAndrew Dolgov
cache/getUrl: basename() passed filename just in case
2020-09-15af_redditimgur: don't add embedded blank gif image for rewritten videosAndrew Dolgov
2020-09-14- fix multiple vulnerabilities in af_proxy_httpAndrew Dolgov
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions
2020-06-24core: pass found enclosures to HOOK_ARTICLE_FILTERAndrew Dolgov
af_redditimgur: remove enclosures if we found something to embed because it's going to be a low-res thumbnail
2020-05-30Created hotkeys_force_top pluginNathan Warner
Renamed swap_jk to match new naming scheme.
2020-05-17implement keyboard-related changes discussed in ↵Andrew Dolgov
https://community.tt-rss.org/t/changing-the-amount-of-scroll-by-arrow-key/3452/7
2020-05-13use intersection observer to unpack visible articles, remove ↵Andrew Dolgov
Headlines.unpackVisible()
2020-05-09rename cdmScrollToId to cdmMoveToIdAndrew Dolgov
prevent smooth scrolling when going directly to an article
2020-03-13allow overriding built-in templates via templates.localAndrew Dolgov
2020-02-28af_readability: allow get full text button to work as a toggle; in cdm, ↵Andrew Dolgov
scroll to article after embedding
2020-02-27af_comics: split contents of subscribe/basic_info/fetch hooks into ↵Andrew Dolgov
appropriate per-comic filters
2020-02-27af_comics: mention that Far Side needs cached mediaAndrew Dolgov
2020-02-27af_comics: escape all template urlsAndrew Dolgov
2020-02-27use canonical fetch url for Far SideAndrew Dolgov
2020-02-27remove unnecessary debugging from previousAndrew Dolgov
2020-02-27af_comics: add experimental support for The Far SideAndrew Dolgov
2020-02-27af_readability: sanitize content requested for embeddingAndrew Dolgov
2020-02-27fix plugins/note javascript part broken by previous changesetAndrew Dolgov
2020-02-27af_readability: add article button to embed content of a specific articleAndrew Dolgov
2020-02-22don't generate default.css, replace with themes/light.css as a default root ↵Andrew Dolgov
CSS file
2020-01-04Also match images with query string (size, tokens, etc).koffieanon
2020-01-04Spaces to tabs for consistency.koffieanon
2020-01-04Fix bug processing found due to operator precedence.koffieanon
2019-12-18remove version.php and VERSION global constant, do version-related things in ↵Andrew Dolgov
a slightly less ridiculous way
2019-11-27Af_Youtube_Embed: whitelist youtube iframes if enabledAndrew Dolgov
2019-11-18af_comics: support buni webtoon episodesAndrew Dolgov
2019-11-032fa: check TOTP based on previous secret values (oops of the year, 2019)Andrew Dolgov
2019-11-01auth_internal: fix indentsAndrew Dolgov
2019-11-01implement app password checking / management UIAndrew Dolgov
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-01 02:02:45 +0000