Commit Graph

301 Commits

Author SHA1 Message Date
Dennis Schwerdel
59d6f3593c Add config option to disable and hide self-update 2017-02-23 21:22:56 +01:00
Alexandre Alapetite
00f446d155 Disable "mark all as read" before confirmation script is loaded
https://github.com/FreshRSS/FreshRSS/issues/1342
2016-10-29 13:11:37 +02:00
Alexandre Alapetite
2a5aa34ad2 Better control of number of entries per page or RSS feed
https://github.com/FreshRSS/FreshRSS/issues/1249
* Since X hours: `https://freshrss.example/i/?a=rss&hours=3`
* Explicit number: `https://freshrss.example/i/?a=rss&nb=10`
* Limited by `min_posts_per_rss` and `max_posts_per_rss` in user config
2016-09-11 15:06:33 +02:00
Alexandre Alapetite
8a776f1461 Prevent a target _blank attacks with window.opener
https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339
2016-09-07 14:35:51 +02:00
Alexandre Alapetite
32c734ef62 SQL mark search as read
https://github.com/FreshRSS/FreshRSS/issues/608
2016-08-18 00:00:08 +02:00
Alexandre Alapetite
a0230ad70b Minor HTML fixes
Fix aria bug. Move some content before the flush. XHTML syntax.
2016-08-15 21:57:37 +02:00
Alexandre Alapetite
e6fd34bdda CSRF token, update HTTP Referrer policy to same-origin
https://www.w3.org/TR/referrer-policy/#referrer-policy-no-referrer
https://github.com/FreshRSS/FreshRSS/issues/570
https://github.com/FreshRSS/FreshRSS/issues/955
https://github.com/FreshRSS/FreshRSS/issues/1198
https://github.com/FreshRSS/FreshRSS/issues/565
https://github.com/FreshRSS/FreshRSS/issues/554
2016-08-13 17:49:31 +02:00
Alexandre Alapetite
a6071a0d98 PHP 5.3 compatibility for callback
https://github.com/FreshRSS/FreshRSS/issues/1208
2016-08-12 22:56:02 +02:00
Alexandre Alapetite
dccc2a8435 meta referrer origin
https://github.com/FreshRSS/FreshRSS/issues/955
Tested in Firefox 48, Chrome 53, Edge 25
2016-08-07 13:52:57 +02:00
Alexandre Alapetite
93f7f84987 Restaure compatibility with Internet Explorer 11 / Edge
https://github.com/FreshRSS/FreshRSS/issues/772
2016-07-31 18:25:02 +02:00
Alexandre Alapetite
b042d3a772 HTTP2 optimization
Fast flush HTTP headers, push promise CSS.
Requires PHP 5.3+ due to anonymous function.
Do not load syles, scripts, and notifications for Ajax requests.
https://github.com/FreshRSS/FreshRSS/issues/1089
2016-04-23 19:10:32 +02:00
Alexandre Alapetite
cb913a3a76 CSP for statistics and forms
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 19:15:23 +01:00
Alexandre Alapetite
b486414988 CSP for bookmarklet (subscription)
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 18:06:32 +01:00
Alexandre Alapetite
e3dc7d46e1 CSP: Use inline JSON instead of one-time cookie
Simpler, lighter
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 14:23:24 +01:00
Alexandre Alapetite
e4a459a6ed CSP no inline javascript draft
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-16 23:53:39 +01:00
Alexandre Alapetite
362dbad0b8 Several position problems, in particular in the global view
Multiple small bugs in global and reader views.
Related to these old issues:
https://github.com/FreshRSS/FreshRSS/issues/634
https://github.com/FreshRSS/FreshRSS/issues/275
2016-01-24 13:18:48 +01:00
Alexandre Alapetite
0a1b628265 ENT_COMPAT
https://github.com/FreshRSS/FreshRSS/pull
https://github.com/FreshRSS/FreshRSS/issues/938
2015-10-27 22:11:19 +01:00
Alexandre Alapetite
02a3cb4652 Config allow robots
https://github.com/FreshRSS/FreshRSS/issues/938
2015-10-25 00:01:13 +02:00
Alexis Degrugillier
84824f8599 Add a visual alert on categories
When a category has one or more feeds with errors, a visual warning is displayed before the name of the category.
2015-09-12 18:58:08 -04:00
Alexis Degrugillier
269c6b88c4 Add a system configuration page
It allows to modify system configuration from the interface. At the moment, only limits are modifiable. The user limit was removed from the user page and added here along with categories and feeds limits.
2015-08-22 09:33:58 -04:00
Alexandre Alapetite
963dd6d260 ! encoding problem 2
964a768bc3 (commitcomment-9385695)
2015-01-22 08:31:54 +01:00
Alexandre Alapetite
dfaf1c451f Revert "! encoding problem"
This reverts commit 964a768bc3.
2015-01-22 08:29:58 +01:00
Alexandre Alapetite
964a768bc3 ! encoding problem
211569ef85 (commitcomment-9384719)
2015-01-21 22:37:17 +01:00
Alexandre Alapetite
211569ef85 Minz: missing URL key/param encoding
Caused searches such as "intitle:&" to fail after paging, and
possible XSS vulnerabilities.
Discovered during https://github.com/FreshRSS/FreshRSS/issues/754
2015-01-21 00:44:26 +01:00
Marien Fressinaud
81dac9975d Fix aside_configure for extension/configure action 2015-01-14 23:47:06 +01:00
Marien Fressinaud
73023bc12b Merge branch 'dev' into 252-extensions
Conflicts:
	app/FreshRSS.php
	app/Models/Configuration.php
	app/views/index/index.phtml
	app/views/index/normal.phtml
	lib/Minz/Configuration.php
	lib/Minz/Translate.php
	lib/lib_rss.php
2015-01-08 14:18:32 +01:00
Marien Fressinaud
5f9672111f Fix last calls to Minz_Configuration methods
- We have still to fix actualize_script and greader api (refactoring?)
- We have to fix the FreshRSS_Configuration calls
- We have to fix availableLanguages calls

See https://github.com/FreshRSS/FreshRSS/issues/730
2015-01-06 20:50:58 +01:00
Marien Fressinaud
d3a93ea290 BREAKING FEATURE: Remove general in config
General attribute has been removed from system config.
Now subattributes (e.g. environment, salt, title, etc.) are directly accessible.

YOU HAVE TO FIX YOUR ./data/config.php file!

- Remove the general array
- Values inside this array must be kept
- To see what it must look like, please have a look to ./data/config.default.php
  (but keep your values!!).

See https://github.com/FreshRSS/FreshRSS/issues/730
2015-01-06 18:53:36 +01:00
Marien Fressinaud
7cca47d1ab Change name of user configuration var in Context
- FreshRSS_Context::$conf is replaced by FreshRSS_Context::$user_conf
- Introduce FreshRSS_Context::$system_conf
- Remove FreshRSS_Configuration object

See https://github.com/FreshRSS/FreshRSS/issues/730
2015-01-05 22:45:03 +01:00
Marien Fressinaud
51a71ec4b9 New configuration system (not working yet)
- Use only Minz_Configuration
- register() method to load a new configuration file
- get() to get a configuration
- new exceptions related to configuration
- fix a list configuration calls to have FRSS working

Current problems to resolve:

- How to handle configuration param verifications (i.e. check auth_type
  is a value from none, http_auth, persona or form)
- We must use $conf = Minz_Configuration::get('system'); $general_conf = $conf->general;
  to access global system configuration which is quite annoying. How to change that?

See https://github.com/FreshRSS/FreshRSS/issues/730
2015-01-05 16:54:16 +01:00
Marien Fressinaud
0b89867800 Merge branch 'dev' into 252-extensions
Conflicts:
	app/i18n/en/admin.php
	app/i18n/en/feedback.php
	app/i18n/en/gen.php
	app/i18n/fr/admin.php
	app/i18n/fr/feedback.php
	app/i18n/fr/gen.php
	app/views/index/normal.phtml
2014-12-17 21:41:33 +01:00
Marien Fressinaud
cad4259e62 Fix i18n for subscription pages 2014-12-11 17:26:01 +01:00
Marien Fressinaud
f43b273706 Update i18n for statistics 2014-12-11 16:10:39 +01:00
Marien Fressinaud
d455837c6d Fix i18n for normal view 2014-12-11 00:00:15 +01:00
Marien Fressinaud
89d0f98faf Fix i18n for nav menu 2014-12-10 22:56:36 +01:00
Marien Fressinaud
2f24f0fe88 Fix i18n for aside subscription 2014-12-10 22:37:49 +01:00
Marien Fressinaud
c1b48c4bc0 Fix i18n for aside_stats 2014-12-10 22:32:55 +01:00
Marien Fressinaud
7dee863577 Fix i18n for aside_feed 2014-12-10 22:29:13 +01:00
Marien Fressinaud
f807a6f5c1 Fix i18n for header and aside_configure 2014-12-10 22:10:01 +01:00
Marien Fressinaud
9fc60317ee First draft for listing and manipulate extensions
See https://github.com/FreshRSS/FreshRSS/issues/252
2014-12-05 14:17:02 +01:00
Alexis Degrugillier
4c4604120e Fix view title 2014-11-02 18:22:59 -05:00
Marien Fressinaud
5d6407a0bf Update i18n
- Fix i18n strings
- Fix typo profil -> profile

See https://github.com/marienfressinaud/FreshRSS/issues/678
2014-10-26 12:22:13 +01:00
Marien Fressinaud
15316b77f6 Fix last sections of main.js
See https://github.com/marienfressinaud/FreshRSS/issues/634
2014-10-24 15:08:57 +02:00
Marien Fressinaud
bd5757fff8 Inverse reader and global buttons in nav_menu 2014-10-24 14:54:56 +02:00
Marien Fressinaud
fa0c7d75e6 Begin to fix global view 2014-10-24 13:50:08 +02:00
Marien Fressinaud
0d6993fe08 Reader view comes back!
See https://github.com/marienfressinaud/FreshRSS/issues/634
2014-10-24 12:51:17 +02:00
Marien Fressinaud
0c8b55fc13 First iteration to update all the themes
See See https://github.com/marienfressinaud/FreshRSS/issues/634
2014-10-24 10:07:53 +02:00
Marien Fressinaud
45dbe94890 Fix aside on mobile (Origine) 2014-10-23 13:54:18 +02:00
Marien Fressinaud
cb730c3734 Last fix for Origine (I hope!)
See https://github.com/marienfressinaud/FreshRSS/issues/634
2014-10-23 13:33:48 +02:00
Marien Fressinaud
6dc1267b98 Fix Origine theme
See https://github.com/marienfressinaud/FreshRSS/issues/634
2014-10-23 12:33:22 +02:00