InverleandAlexandre Alapetite c7e6ab76fe Disallow fetching of non remote uri (#9215) ...

* Disallow redirection to non-remote URLs

Fix https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-fgq3-88jp-7rj9

* Disable unnecessary stream wrappers

* Add `is_remote_uri()` check at beginning of `httpGet()`

* SimplePie syntax

* Sync SimplePie
* https://github.com/FreshRSS/simplepie/pull/88

---------

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>

2026-08-19 15:24:09 +02:00

..

dotNotationUtil.php

feat(favicon): Use feed-provided icon URL (<image><url>, Atom icon/logo, JSON Feed icon) (#8633)

2026-03-31 09:57:06 +02:00

feverUtil.php

Housekeeping lib_rss.php (#8193)

2025-11-11 08:17:12 +01:00

httpUtil.php

Disallow fetching of non remote uri (#9215)

2026-08-19 15:24:09 +02:00

passwordUtil.php

Housekeeping lib_rss.php (#8193)

2025-11-11 08:17:12 +01:00