2 Commits

Include renames

Author	SHA1	Message	Date
Alexandre Alapetite	61d7925af1	Config + increase default values for search max length and depth (#9280) ... Fix https://github.com/FreshRSS/FreshRSS/discussions/9279 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/9277 Values can be overridden in `data/config.php`, or in `./data/config.custom.php` before the install process	2026-09-10 22:14:55 +02:00
3 people	07c939d84f	Fix: infinite recursion in sanitizeHTML() when maxLength truncation doesn't converge (#9043) ... * Fix: infinite recursion in sanitizeHTML() when maxLength truncation doesn't converge Sanitizing can grow a truncated HTML fragment (e.g. an unclosed tag gets auto-closed), so the previous recursive shrink-and-retry could hit a fixed point and recurse forever, crashing on a stack overflow. Bound the retries and fall back to a hard truncation that always terminates. Add unit tests for FreshRSS_SimplePieCustom::sanitizeHTML(), the XSS sanitization applied to all untrusted feed content, which had no coverage. * Update app/Models/SimplePieCustom.php Co-authored-by: Frans de Jonge <fransdejonge@gmail.com> * Some refactoring Avoid two mb_strcut in a row. More cases for fallback. Better fallback. More edge cases. * Address trailing incomplete tag or entity * Whitespace reduction --------- Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr> Co-authored-by: Frans de Jonge <fransdejonge@gmail.com>	2026-08-28 08:47:04 +02:00