Commit Graph

2586 Commits

Author SHA1 Message Date
Alexandre Alapetite
cbac2afd23 CSP compatibility with Firefox older than 45
https://github.com/FreshRSS/FreshRSS/pull/1075
https://github.com/FreshRSS/FreshRSS/pull/1078
https://developer.mozilla.org/en-US/Firefox/Releases/45#Security
https://bugzilla.mozilla.org/show_bug.cgi?id=1045891
2016-03-01 21:56:19 +01:00
Alexandre Alapetite
ee69a24a2d Merge pull request #1098 from Alkarex/HTTPS-enclosures
SimplePie force HTTPS for enclosures
2016-03-01 20:53:25 +01:00
Alexandre Alapetite
9e2e5fd594 SimplePie force HTTPS simplifie code
https://github.com/FreshRSS/FreshRSS/issues/1083
https://github.com/FreshRSS/FreshRSS/pull/1087
2016-03-01 19:48:52 +01:00
Alexandre Alapetite
c1de11f17d SimplePie force HTTPS bug with sub-domains
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-03-01 19:14:26 +01:00
Alexandre Alapetite
0eef625b6d SimplePie force HTTPS for enclosures
https://github.com/FreshRSS/FreshRSS/issues/1083
https://github.com/FreshRSS/FreshRSS/pull/1087
2016-02-29 20:38:21 +01:00
Alexandre Alapetite
eee3a90a50 Readme force HTTPS
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-29 18:41:58 +01:00
Alexandre Alapetite
1e644b6470 Merge pull request #1087 from Alkarex/HTTPS_Everywhere
Force HTTPS for selected embed providers
2016-02-29 17:47:05 +01:00
Alexandre Alapetite
685c0ad2f8 SimplePie HTTPS updated comments
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-29 17:20:23 +01:00
Alexandre Alapetite
d344da59fd HTTPS search tree: simplify code
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-29 17:09:44 +01:00
Alexandre Alapetite
9711f02db7 SimplePie Force HTTPS custom list domains
Load from data/force-https.default.txt and data/force-https.txt
Efficient tree structure to search the domains
https://github.com/FreshRSS/FreshRSS/pull/1087
2016-02-28 21:34:54 +01:00
Alexandre Alapetite
911bf6aefe Merge pull request #1097 from Alkarex/Install-check
Install check XML / JSON
2016-02-28 14:14:36 +01:00
Alexandre Alapetite
6b19872b1a Install check XML / JSON
https://github.com/FreshRSS/FreshRSS/issues/1094
https://github.com/FreshRSS/FreshRSS/issues/1092
2016-02-28 14:07:21 +01:00
Alexandre Alapetite
6a5451116d Readme: Referer, DOM / XML
Add note about Referer https://github.com/FreshRSS/FreshRSS/issues/565
Add note about DOM / XML extensions
https://github.com/FreshRSS/FreshRSS/issues/1094
2016-02-28 13:40:15 +01:00
Alexandre Alapetite
be3b2e3327 Readme 1.3.1-beta 2016-02-28 12:36:55 +01:00
Alexandre Alapetite
3b2f9533c3 Merge pull request #1078 from Alkarex/CSP-no-inline
Content-Security-Policy
2016-02-28 12:13:19 +01:00
Alexandre Alapetite
995cf58d24 CSP bug in install script
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-28 00:08:57 +01:00
Alexandre Alapetite
ffe38c930b JS formatting 2016-02-27 22:40:03 +01:00
Alexandre Alapetite
830c5aad03 Merge pull request #1096 from Alkarex/php7-share
PHP7 share bug
2016-02-27 22:10:19 +01:00
Alexandre Alapetite
c9d3d78340 CSP manually refreshing feeds
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-27 17:51:13 +01:00
Alexandre Alapetite
b501fd6514 PHP7 share bug
https://github.com/FreshRSS/FreshRSS/issues/1072
2016-02-27 14:53:03 +01:00
Alexandre Alapetite
b46c8607ee Merge pull request #1093 from Alkarex/json_decode
json_decode fallback debug
2016-02-25 19:27:05 +01:00
Alexandre Alapetite
bc6a1eab88 Merge pull request #1088 from Alkarex/LessLog
Do not log article updates
2016-02-25 19:20:02 +01:00
Alexandre Alapetite
c27500e005 Merge pull request #1091 from Alkarex/jQuery2.2.1
jQuery 2.2.1
2016-02-25 19:19:49 +01:00
Alexandre Alapetite
bd47d14a53 json_decode fallback bug 2 2016-02-24 21:20:37 +01:00
Alexandre Alapetite
9adbd2ba9b json_decode fallback debug
https://github.com/FreshRSS/FreshRSS/issues/1092
2016-02-24 21:16:21 +01:00
Alexandre Alapetite
9d4a445758 Work in progress HTTPS 2016-02-24 21:08:24 +01:00
Alexandre Alapetite
501d1c5a2e jQuery 2.2.1
Fix bug on .position() used by FreshRSS
http://blog.jquery.com/2016/02/22/jquery-1-12-1-and-2-2-1-released/
2016-02-23 21:47:10 +01:00
Alexandre Alapetite
05ba5bc569 Do not log article updates
It seems to work well, and there are too many such updates.
BTW, we should have a verbose/insane log level.
2016-02-22 21:10:35 +01:00
Alexandre Alapetite
1f7647f4df Merge branch 'HTTPS_Everywhere' of https://github.com/Alkarex/FreshRSS into HTTPS_Everywhere 2016-02-22 20:18:53 +01:00
Alexandre Alapetite
0f870e800b Avoid prototol-relative URLs
Protocol-relative URLs do not seem to work well with API / mobile apps
2016-02-22 20:18:11 +01:00
Alexandre Alapetite
74ef8d9b15 SimplePie force HTTPS, another approach
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-22 08:51:02 +01:00
Alexandre Alapetite
4a9a7404bc Syntax error 2016-02-21 22:45:54 +01:00
Alexandre Alapetite
bd0facbb73 HTTPS SimplePie experiment
Syntax bug
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-21 22:42:30 +01:00
Alexandre Alapetite
83e58d3759 Experiment with forcing HTTPS for selected embed providers
YouTube, DailyMotion, Tumblr
https://github.com/FreshRSS/FreshRSS/issues/1083
2016-02-21 22:19:07 +01:00
Alexandre Alapetite
38c2d671e3 CSP different policies per controller
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 21:25:23 +01:00
Alexandre Alapetite
cb913a3a76 CSP for statistics and forms
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 19:15:23 +01:00
Alexandre Alapetite
b486414988 CSP for bookmarklet (subscription)
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 18:06:32 +01:00
Alexandre Alapetite
264d05297c CSP for statistics
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 17:26:37 +01:00
Alexandre Alapetite
e3dc7d46e1 CSP: Use inline JSON instead of one-time cookie
Simpler, lighter
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 14:23:24 +01:00
Alexandre Alapetite
64ec0708a1 More work for CSP, in particular install
Install needs testing.
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-21 02:51:27 +01:00
Alexandre Alapetite
e3105f2135 JavaScript popup number bug (percent escaping)
https://github.com/FreshRSS/FreshRSS/pull/1078

cc1390fe94
2016-02-21 01:46:27 +01:00
Alexandre Alapetite
cc1390fe94 JavaScript popup number bug
A backslash caused problem.
https://github.com/FreshRSS/FreshRSS/issues/1075
https://github.com/FreshRSS/FreshRSS/pull/1078
2016-02-21 00:58:51 +01:00
Alexandre Alapetite
67dfeeb397 Merge pull request #1086 from Alkarex/srcset-quickfix
Filter out img sizes
2016-02-21 00:38:14 +01:00
Alexandre Alapetite
5a80127140 Filter out img sizes
https://github.com/FreshRSS/FreshRSS/issues/1077
https://github.com/FreshRSS/FreshRSS/issues/1081
2016-02-21 00:36:30 +01:00
Alexandre Alapetite
8316493384 Merge pull request #1080 from Alkarex/srcset-quickfix
Filter-out img srcset for the time being
2016-02-18 10:10:53 +01:00
Alexandre Alapetite
8cdf44c87b CSP allow iframes
E.g. for YouTube videos, etc.
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-17 01:17:56 +01:00
Alexandre Alapetite
86e113ba80 Filter-out img srcset for the time being
https://github.com/FreshRSS/FreshRSS/issues/1077
2016-02-17 00:19:49 +01:00
Alexandre Alapetite
e4a459a6ed CSP no inline javascript draft
https://github.com/FreshRSS/FreshRSS/issues/1075
2016-02-16 23:53:39 +01:00
Alexandre Alapetite
ad54c6624c Changelog Turkish language
By https://github.com/hckweb
https://github.com/FreshRSS/FreshRSS/issues/1073
https://github.com/FreshRSS/FreshRSS/pull/1074
2016-02-16 19:16:53 +01:00
Alexandre Alapetite
2e8a1c47e9 Merge pull request #1050 from Alkarex/jQuery2.2
Update jQuery, and UI bugs (scroll, global and reader views)
2016-02-16 19:05:07 +01:00