Inverle 0cf8815de1 Fix HTML injection via decoded website attribute in feed menu (#9170) ...

To reproduce:
1. Add a feed e.g. `https://github.com/FreshRSS/FreshRSS/releases.atom`
2. Change its website URL to `https://github.com/FreshRSS/FreshRSS/releases.atom?"><marquee>test</marquee><?x`
3. Open the feed's menu from the sidebar after saving the settings

Follow-up of https://github.com/FreshRSS/FreshRSS/pull/9146 (same issue but in a different menu)

2026-08-03 00:02:04 +02:00

..

vendor

Fix chart resize regression due to chart.js v4 update (#8298)

2025-12-09 00:59:10 +01:00

api.js

Translate the API information page (#7922)

2025-09-10 07:04:17 +02:00

category.js

Improved: Subscription management page (#6816)

2024-09-29 10:28:28 +02:00

config.js

Allow extension configurations to use select-input-changer (#8721)

2026-04-28 09:14:09 +02:00

draggable.js

Fixed: drag&drop Sharing/User Query (#6505)

2024-05-28 22:28:06 +02:00

extra.js

Fix extension settings cancel action (#9053)

2026-07-21 17:45:36 +02:00

feed.js

Detect JSON feeds from .json URLs (#9058)

2026-07-20 18:01:41 +02:00

global_view.js

Implement setting for iframe referrer allowlist (#8672)

2026-04-07 18:29:27 +02:00

install.js

Improve UI/UX install process (#5147)

2023-03-04 13:57:52 +01:00

integration.js

fixed HTML: <fieldset> + <legend> (#6202)

2024-03-17 22:49:12 +01:00

main.js

Fix HTML injection via decoded website attribute in feed menu (#9170)

2026-08-03 00:02:04 +02:00

preview.js

fix preview (#4291)

2022-05-15 21:52:52 +02:00

statsWithChartjs.js

Fix chart resize regression due to chart.js v4 update (#8298)

2025-12-09 00:59:10 +01:00