Commit Graph

205 Commits

Author SHA1 Message Date
Alexandre Alapetite
d9bf9b2c6f Fix bug move feed to another category
CSRF
2016-09-24 17:32:30 +02:00
Alexandre Alapetite
8a776f1461 Prevent a target _blank attacks with window.opener
https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339
2016-09-07 14:35:51 +02:00
Alexandre Alapetite
1d6c71e216 Read-all bug fixed
Introduced by the new forms of
https://github.com/FreshRSS/FreshRSS/issues/772
https://github.com/FreshRSS/FreshRSS/pull/1188
2016-08-15 23:07:47 +02:00
Alexandre Alapetite
6941b4c742 Refresh sticky column after auto-load
https://github.com/FreshRSS/FreshRSS/pull/1172
2016-08-14 23:00:07 +02:00
Alexandre Alapetite
a180485f91 sticky-kit fix, and compatible async defer
And set correct parent option
https://github.com/FreshRSS/FreshRSS/pull/1172
2016-08-13 23:39:52 +02:00
Alexandre Alapetite
0c4add6913 Merge conflicts
https://github.com/FreshRSS/FreshRSS/pull/1172
2016-08-13 21:35:34 +02:00
Alexandre Alapetite
e6fd34bdda CSRF token, update HTTP Referrer policy to same-origin
https://www.w3.org/TR/referrer-policy/#referrer-policy-no-referrer
https://github.com/FreshRSS/FreshRSS/issues/570
https://github.com/FreshRSS/FreshRSS/issues/955
https://github.com/FreshRSS/FreshRSS/issues/1198
https://github.com/FreshRSS/FreshRSS/issues/565
https://github.com/FreshRSS/FreshRSS/issues/554
2016-08-13 17:49:31 +02:00
Alexandre Alapetite
396ebb0fd2 Minor JavaScript problems with drag & drop
Independent of the jQuery update
2016-08-07 00:17:34 +02:00
Alexandre Alapetite
157781c8eb Fix drag in Internet Explorer
Internet Explorer does not support setData('text/html') and setData() is
deprecated
https://msdn.microsoft.com/en-us/library/ms536744(v=vs.85).aspx
2016-08-06 20:52:08 +02:00
Alexandre Alapetite
de2c6fab7a Fix drag in Chrome 2016-08-06 15:43:28 +02:00
Alexandre Alapetite
6d5b868b34 Merge for conflicts 2016-08-06 14:20:00 +02:00
Alexandre Alapetite
a051970d5b jQuery 3 compatibility
https://jquery.com/upgrade-guide/3.0/

* event.props removed

https://jquery.com/upgrade-guide/3.0/#breaking-change-jquery-event-props-and-jquery-event-fixhooks-removed
https://github.com/jquery/api.jquery.com/issues/405

* jqXHR.success(), jqXHR.error(), and jqXHR.complete() removed
2016-08-06 14:13:03 +02:00
Alexandre Alapetite
5fa4f40133 jQuery 3.1.0
http://blog.jquery.com/2016/07/07/jquery-3-1-0-released-no-more-silent-errors/
2016-08-06 13:24:04 +02:00
Alexandre Alapetite
3652dea854 JSHint and safer async init_normal 2016-08-06 13:18:46 +02:00
Alexandre Alapetite
32b6ecc3af JS unused variables, syntax 2016-08-02 00:42:07 +02:00
Alexandre Alapetite
75d2fa3fd3 JS load optimization
Start loading what we can already before DOM is ready
2016-08-02 00:30:11 +02:00
Alexandre Alapetite
b382f266de Fix bug articles not marked as read
https://github.com/FreshRSS/FreshRSS/issues/1123
https://github.com/FreshRSS/FreshRSS/issues/423
2016-08-02 00:29:31 +02:00
Alexandre Alapetite
c1548e732d Remove Mozilla Persona login
https://github.com/FreshRSS/FreshRSS/issues/1052
2016-07-31 14:58:19 +02:00
romibi
d9e14621b5 Make Sidebar Sticky 2016-07-08 19:39:02 +02:00
Alexandre Alapetite
bd58a0a12c Merge branch 'CSP-no-inline' into dev 2016-02-28 00:09:19 +01:00
Alexandre Alapetite
995cf58d24 CSP bug in install script
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-28 00:08:57 +01:00
Alexandre Alapetite
cb625a5fba Merge branch 'CSP-no-inline' into dev 2016-02-27 22:40:16 +01:00
Alexandre Alapetite
ffe38c930b JS formatting 2016-02-27 22:40:03 +01:00
Alexandre Alapetite
1ae9136609 Merge branch 'CSP-no-inline' into dev 2016-02-27 17:51:32 +01:00
Alexandre Alapetite
c9d3d78340 CSP manually refreshing feeds
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-27 17:51:13 +01:00
Alexandre Alapetite
e546a0ab04 Merge branch 'jQuery2.2.1' into dev 2016-02-23 21:48:12 +01:00
Alexandre Alapetite
501d1c5a2e jQuery 2.2.1
Fix bug on .position() used by FreshRSS
http://blog.jquery.com/2016/02/22/jquery-1-12-1-and-2-2-1-released/
2016-02-23 21:47:10 +01:00
Alexandre Alapetite
cb913a3a76 CSP for statistics and forms
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 19:15:23 +01:00
Alexandre Alapetite
b486414988 CSP for bookmarklet (subscription)
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 18:06:32 +01:00
Alexandre Alapetite
264d05297c CSP for statistics
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 17:26:37 +01:00
Alexandre Alapetite
e3dc7d46e1 CSP: Use inline JSON instead of one-time cookie
Simpler, lighter
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 14:23:24 +01:00
Alexandre Alapetite
64ec0708a1 More work for CSP, in particular install
Install needs testing.
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 02:51:27 +01:00
Alexandre Alapetite
cc1390fe94 JavaScript popup number bug
A backslash caused problem.
https://github.com/FreshRSS/FreshRSS/issues/1075
https://github.com/FreshRSS/FreshRSS/pull/1078
2016-02-21 00:58:51 +01:00
Alexandre Alapetite
e4a459a6ed CSP no inline javascript draft
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-16 23:53:39 +01:00
Alexandre Alapetite
f62ab5fe5b Offset in global view
https://github.com/FreshRSS/FreshRSS/pull/1050#issuecomment-175166593
2016-01-26 22:00:18 +01:00
Alexandre Alapetite
362dbad0b8 Several position problems, in particular in the global view
Multiple small bugs in global and reader views.
Related to these old issues:
https://github.com/FreshRSS/FreshRSS/issues/634
https://github.com/FreshRSS/FreshRSS/issues/275
2016-01-24 13:18:48 +01:00
Alexandre Alapetite
e664138bd2 Update jQuery from 2.1.4 to 2.2
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
2016-01-09 14:21:59 +01:00
Alexandre Alapetite
f79f2a7e98 Patch for confirmation in non-Firefox (Chrome)
https://github.com/FreshRSS/FreshRSS/issues/739
Use standards instead of Firefox-specific explicitOriginalTarget
2015-05-29 23:30:37 +02:00
Alexandre Alapetite
005751d3fb jQuery 2.1.4
http://blog.jquery.com/2015/04/28/jquery-1-11-3-and-2-1-4-released-ios-fail-safe-edition/
2015-05-16 22:57:51 +02:00
Alexis Degrugillier
dd4fb519be Add an unsaved changes alert on config pages
Before, you could leave a configuration page without knowing if you saved your changes or not.
Now, there is an alert poping up if you have unsaved changes. It will ask you if you want to stay on the page and save your changes or leave the page and loose your changes.

See #739
2015-03-14 09:43:08 -04:00
Marien Fressinaud
8ab8121757 Merge pull request #793 from aledeg/modify-share
Harmonize share configuration view.
2015-02-18 11:05:51 +01:00
Alexis Degrugillier
6e7bdb1709 Add a cleaning process in the auto-remove feature.
Before, when the status change was too quick, sometimes, articles weren't removed from the view.
Now they are removed by adding a statement that grabs past articles with specific properties and remove them.

See #738
2015-02-15 18:37:04 -05:00
Alexis Degrugillier
b8fd3caf83 Harmonize share configuration view.
Before, for shares that don't need options, only a button to remove it was visible. It was source of confusion for users.
I changed the look of those shares by using the same layout as others (minus the help). As there is no configuration possible for the url, the field is disabled but it is possible to change the name of the share.

See #787
2015-02-14 11:00:26 -05:00
Alexandre Alapetite
963dd6d260 ! encoding problem 2
964a768bc3 (commitcomment-9385695)
2015-01-22 08:31:54 +01:00
Alexandre Alapetite
dfaf1c451f Revert "! encoding problem"
This reverts commit 964a768bc3.
2015-01-22 08:29:58 +01:00
Alexandre Alapetite
964a768bc3 ! encoding problem
211569ef85 (commitcomment-9384719)
2015-01-21 22:37:17 +01:00
Marien Fressinaud
14206aca16 Improve behavior when mark as read / favorite fail
If the request fails:
- Open a notification to inform user
- Remove pending index from the pending_feeds list

Fix https://github.com/FreshRSS/FreshRSS/issues/751
2015-01-18 11:59:03 +01:00
Marien Fressinaud
2d1cb016ab Fix user interaction with showing password feature
Before, the password was hidden again after 2 seconds. Now, the password
is hidden when the mouse is released

Fix https://github.com/FreshRSS/FreshRSS/issues/734
2015-01-13 11:16:13 +01:00
Marien Fressinaud
0140448a56 Refactor FreshRSS_Share object to be more usable
- FreshRSS_Share is the only object we manipulate
- Add a way to register new share options easily
- Move some i18n keys from index.php to gen.php

See https://github.com/FreshRSS/FreshRSS/issues/730
2015-01-07 14:59:18 +01:00
Alexandre Alapetite
c804a30140 jQuery update from 2.1.1 to 2.1.3
http://blog.jquery.com/2014/12/18/jquery-1-11-2-and-2-1-3-released-safari-fail-safe-edition/
2014-12-18 18:42:21 +01:00