mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-05-17 21:04:41 -04:00
Code Issues Packages Projects Releases Wiki Activity
7,003 Commits 3 Branches 85 Tags
6b5304b8258fa12e2aecf28e5b99111bd94de288
Commit Graph

1388 Commits

Author SHA1 Message Date
Alexandre Alapetite
8a776f1461 Prevent a target _blank attacks with window.opener 
https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339
 2016-09-07 14:35:51 +02:00
Alexandre Alapetite
abdf85094d Change style for podcast download 
https://github.com/FreshRSS/FreshRSS/issues/1236
 2016-09-04 17:05:10 +02:00
Alexandre Alapetite
3b2b91e1f2 Download icon 💾 for podcasts 
https://github.com/FreshRSS/FreshRSS/issues/1236
 2016-09-03 21:46:43 +02:00
Alexandre Alapetite
e098119441 Merge branch 'FreshRSS/dev' into PostgreSQL 2016-08-31 15:56:59 +02:00
Alexandre Alapetite
1a53058ef0 HTTP security: prevent reflection abuse 
https://msdn.microsoft.com/en-us/library/gg622941(v=vs.85).aspx
 2016-08-29 09:44:18 +02:00
Alexandre Alapetite
2af3abc89e Merge branch 'FreshRSS/dev' into PostgreSQL 2016-08-20 12:22:56 +02:00
Alexandre Alapetite
1d6c71e216 Read-all bug fixed 
Introduced by the new forms of
https://github.com/FreshRSS/FreshRSS/issues/772
https://github.com/FreshRSS/FreshRSS/pull/1188
 2016-08-15 23:07:47 +02:00
Alexandre Alapetite
6941b4c742 Refresh sticky column after auto-load 
https://github.com/FreshRSS/FreshRSS/pull/1172
 2016-08-14 23:00:07 +02:00
Alexandre Alapetite
b90f815e25 Merge branch 'FreshRSS/dev' into SuperFeeder_timeout 2016-08-14 10:05:38 +02:00
Alexandre Alapetite
a180485f91 sticky-kit fix, and compatible async defer 
And set correct parent option
https://github.com/FreshRSS/FreshRSS/pull/1172
 2016-08-13 23:39:52 +02:00
Alexandre Alapetite
0c4add6913 Merge conflicts 
https://github.com/FreshRSS/FreshRSS/pull/1172
 2016-08-13 21:35:34 +02:00
Alexandre Alapetite
967dff535d Merge branch 'FreshRSS/dev' into PostgreSQL 2016-08-13 21:14:36 +02:00
Alexandre Alapetite
e6fd34bdda CSRF token, update HTTP Referrer policy to same-origin 
https://www.w3.org/TR/referrer-policy/#referrer-policy-no-referrer
https://github.com/FreshRSS/FreshRSS/issues/570
https://github.com/FreshRSS/FreshRSS/issues/955
https://github.com/FreshRSS/FreshRSS/issues/1198
https://github.com/FreshRSS/FreshRSS/issues/565
https://github.com/FreshRSS/FreshRSS/issues/554
 2016-08-13 17:49:31 +02:00
Alexandre Alapetite
396ebb0fd2 Minor JavaScript problems with drag & drop 
Independent of the jQuery update
 2016-08-07 00:17:34 +02:00
Alexandre Alapetite
157781c8eb Fix drag in Internet Explorer 
Internet Explorer does not support setData('text/html') and setData() is
deprecated
https://msdn.microsoft.com/en-us/library/ms536744(v=vs.85).aspx
 2016-08-06 20:52:08 +02:00
Alexandre Alapetite
de2c6fab7a Fix drag in Chrome 2016-08-06 15:43:28 +02:00
Alexandre Alapetite
6d5b868b34 Merge for conflicts 2016-08-06 14:20:00 +02:00
Alexandre Alapetite
a051970d5b jQuery 3 compatibility 
https://jquery.com/upgrade-guide/3.0/

* event.props removed

https://jquery.com/upgrade-guide/3.0/#breaking-change-jquery-event-props-and-jquery-event-fixhooks-removed
https://github.com/jquery/api.jquery.com/issues/405

* jqXHR.success(), jqXHR.error(), and jqXHR.complete() removed
 2016-08-06 14:13:03 +02:00
Alexandre Alapetite
5fa4f40133 jQuery 3.1.0 
http://blog.jquery.com/2016/07/07/jquery-3-1-0-released-no-more-silent-errors/
 2016-08-06 13:24:04 +02:00
Alexandre Alapetite
3652dea854 JSHint and safer async init_normal 2016-08-06 13:18:46 +02:00
Alexandre Alapetite
7c1b5e322c PostgreSQL draft 
https://github.com/FreshRSS/FreshRSS/issues/416
Based on @Damstre work https://github.com/FreshRSS/FreshRSS/pull/1071
Not tested
 2016-08-02 22:49:35 +02:00
Alexandre Alapetite
32b6ecc3af JS unused variables, syntax 2016-08-02 00:42:07 +02:00
Alexandre Alapetite
75d2fa3fd3 JS load optimization 
Start loading what we can already before DOM is ready
 2016-08-02 00:30:11 +02:00
Alexandre Alapetite
b382f266de Fix bug articles not marked as read 
https://github.com/FreshRSS/FreshRSS/issues/1123
https://github.com/FreshRSS/FreshRSS/issues/423
 2016-08-02 00:29:31 +02:00
Alexandre Alapetite
17c3e616e8 Merge pull request #1187 from Alkarex/remove_persona 
Remove Mozilla Persona login
 2016-08-01 18:07:03 +02:00
Alexandre Alapetite
c1548e732d Remove Mozilla Persona login 
https://github.com/FreshRSS/FreshRSS/issues/1052
 2016-07-31 14:58:19 +02:00
Alexandre Alapetite
df27e435f2 Merge pull request #1186 from Alkarex/api_help 
More links for API help
 2016-07-31 11:58:20 +02:00
Alexandre Alapetite
21a6521ba9 More links for API help 
https://github.com/FreshRSS/FreshRSS/issues/328#issuecomment-236100791
https://github.com/FreshRSS/FreshRSS/issues/957#issuecomment-133581712
 2016-07-31 01:38:46 +02:00
Alexandre Alapetite
462c1e208f PSHB: work-around for SuperFeeder 
Feeds using SuperFeeder for PubSubHubbub push had timeout problems
during substription.
SuperFeeder bot was returning 422 "We could not verify your callback
Error: ETIMEDOUT"
It seems to be due to the the fact that SuperFeeder bot uses keep-alive
but expects the server to close the connection.
https://github.com/FreshRSS/FreshRSS/issues/312#issuecomment-73716936
 2016-07-30 23:37:13 +02:00
Alexandre Alapetite
090c647cd5 Fix logs style scroll bug 
https://github.com/FreshRSS/FreshRSS/issues/1178
There was a conflict on the ".logs" class name
 2016-07-30 12:19:02 +02:00
romibi
d9e14621b5 Make Sidebar Sticky 2016-07-08 19:39:02 +02:00
Alexandre Alapetite
6248246735 Adjust caching for favicon with errors 2016-04-23 21:48:37 +02:00
Alexandre Alapetite
06189cb666 API support for REDIRECT HTTP headers 
https://github.com/FreshRSS/FreshRSS/issues/1127
 2016-04-10 11:52:16 +02:00
Alexandre Alapetite
a41163ac46 CSP compatibility for home page 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-03-17 21:09:34 +01:00
Alexandre Alapetite
7db99b8382 API limit INPUT to 1MB 2016-03-08 19:30:24 +01:00
Alexandre Alapetite
c4ebc5c4a9 CSP for SVG 
And moved .htaccess rules in the folder there are used
https://github.com/FreshRSS/FreshRSS/issues/1114
 2016-03-08 18:20:14 +01:00
Wanabo
2740dd0401 Added files via upload 
Added missing loader.gif
`.loading { background: url("loader.gif") center center no-repeat; font-size: 0; }`
 2016-03-06 11:52:35 +01:00
Alexandre Alapetite
3b2f9533c3 Merge pull request #1078 from Alkarex/CSP-no-inline 
Content-Security-Policy
 2016-02-28 12:13:19 +01:00
Alexandre Alapetite
995cf58d24 CSP bug in install script 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-28 00:08:57 +01:00
Alexandre Alapetite
ffe38c930b JS formatting 2016-02-27 22:40:03 +01:00
Alexandre Alapetite
c9d3d78340 CSP manually refreshing feeds 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-27 17:51:13 +01:00
Alexandre Alapetite
501d1c5a2e jQuery 2.2.1 
Fix bug on .position() used by FreshRSS
http://blog.jquery.com/2016/02/22/jquery-1-12-1-and-2-2-1-released/
 2016-02-23 21:47:10 +01:00
Alexandre Alapetite
cb913a3a76 CSP for statistics and forms 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-21 19:15:23 +01:00
Alexandre Alapetite
b486414988 CSP for bookmarklet (subscription) 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-21 18:06:32 +01:00
Alexandre Alapetite
264d05297c CSP for statistics 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-21 17:26:37 +01:00
Alexandre Alapetite
e3dc7d46e1 CSP: Use inline JSON instead of one-time cookie 
Simpler, lighter
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-21 14:23:24 +01:00
Alexandre Alapetite
64ec0708a1 More work for CSP, in particular install 
Install needs testing.
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-21 02:51:27 +01:00
Alexandre Alapetite
cc1390fe94 JavaScript popup number bug 
A backslash caused problem.
https://github.com/FreshRSS/FreshRSS/issues/1075
https://github.com/FreshRSS/FreshRSS/pull/1078
 2016-02-21 00:58:51 +01:00
Alexandre Alapetite
e4a459a6ed CSP no inline javascript draft 
https://github.com/FreshRSS/FreshRSS/issues/1075
 2016-02-16 23:53:39 +01:00
Alexandre Alapetite
2e8a1c47e9 Merge pull request #1050 from Alkarex/jQuery2.2 
Update jQuery, and UI bugs (scroll, global and reader views)
 2016-02-16 19:05:07 +01:00