Inverle 48abfd58fa Improve SSRF mitigations by restricting CURLOPT_PROXY (#8950) ...

* Improve SSRF mitigations by restricting `CURLOPT_PROXY`

Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8400
SimplePie PR: https://github.com/FreshRSS/simplepie/pull/83

* Reword docs

* Change single quote to backquote in docs

* Fix `cURL error 5: Could not resolve proxy: Array` error

* Sync SimplePie

* A few fixes

* Implement suggestion

* A few more fixes

* Sync composer
https://github.com/FreshRSS/simplepie/pull/83

---------

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>

2026-07-23 13:05:53 +02:00

..

ActionController.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

AttributesTrait.php

Add some missing PHP native types (#7191)

2025-01-08 13:26:09 +01:00

Auth.php

Use timing safe comparison for tokens everywhere (#8945)

2026-06-27 14:02:20 +02:00

BooleanSearch.php

chore(deps-dev): bump phpstan/phpstan from 2.2.2 to 2.2.3 (#8962)

2026-07-01 21:35:39 +02:00

Category.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

CategoryDAO.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

CategoryDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

CategoryDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Context.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

DatabaseDAO.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

DatabaseDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

DatabaseDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Entry.php

Add per-feed option to show or hide enclosures (#9015)

2026-07-20 18:45:21 +02:00

EntryDAO.php

Fix SQL errors breaking regex search on MySQL / MariaDB (#9036)

2026-07-21 17:50:16 +02:00

EntryDAOPGSQL.php

Implement filter on last modified date by server (#8131)

2026-03-01 21:43:03 +01:00

EntryDAOSQLite.php

Add read status hook for entries (#8995)

2026-07-07 09:04:32 +02:00

Factory.php

Stable IDs during SQL import (#7988)

2025-09-27 15:11:55 +02:00

Feed.php

Show only one representation per media:group (#9009)

2026-07-20 18:27:57 +02:00

FeedDAO.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

FeedDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FeedDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FilterAction.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FilterActionsTrait.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FormAuth.php

Reverse hash and nonce (#8320)

2025-12-15 22:06:05 +01:00

Log.php

Fix log CRLF injection (#7883)

2025-08-31 20:05:30 +02:00

LogDAO.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

ReadingMode.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

Search.php

Fix lost elements while parsing search query (#8884)

2026-05-24 20:23:58 +02:00

Share.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

SimplePieCustom.php

SimplePie: Disallow javascript: URI protocol (#8263)

2026-06-13 21:15:36 +02:00

SimplePieFetch.php

Improve SSRF mitigations by restricting CURLOPT_PROXY (#8950)

2026-07-23 13:05:53 +02:00

StatsDAO.php

Fix statistics repartition averages (#8996)

2026-07-07 10:42:53 +02:00

StatsDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

StatsDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

SystemConfiguration.php

Add SSRF mitigations using filter_var and CURLOPT_RESOLVE (#8400)

2026-06-28 18:51:04 +02:00

Tag.php

Fix bigint timestamps on 32-bit (#7375)

2025-02-26 17:01:25 +01:00

TagDAO.php

Sort labels with locale-aware collation (#9023)

2026-07-11 17:35:33 +02:00

TagDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

TagDAOSQLite.php

Stable IDs during SQL import (#7988)

2025-09-27 15:11:55 +02:00

Themes.php

Disallow setting non-existent theme (#7722)

2025-07-07 23:32:35 +02:00

UserConfiguration.php

Add option to keep or reset article sort order when navigating (#8969)

2026-07-07 11:04:31 +02:00

UserDAO.php

Merge commit from fork

2026-01-03 18:09:44 +01:00

UserQuery.php

New automatic feed visibility/priority during search (#8609)

2026-03-21 17:15:07 +01:00

View.php

Security: public OPML should not contain cURL parameters (#9070)

2026-07-23 06:28:05 +02:00

ViewJavascript.php

Fix regressions on some array structures (#7155)

2024-12-28 23:58:00 +01:00

ViewMode.php

Add hook enums (#8036)

2025-09-30 22:59:41 +02:00

ViewStats.php

New stats overview of dates with most unread articles (#8089)

2025-10-14 11:05:17 +02:00