mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-02-06 19:41:13 -05:00

Files

Alexandre Alapetite 54e2f9107d Disallow iframe srcdoc for now (#7494 )

We do not sanitize this attribute well enough, so striped for now.
It is rarely used: I have not seen any use of it in any of my many test feeds.
Can be added back when we can handle its inherent security issues better.

2025-04-06 00:47:45 +02:00

core-extensions

upd: Turkish translations have been completed. Changes have been made to words in previous translations. (#6960 )

2024-11-01 10:42:28 +01:00

marienfressinaud/lib_opml

Update lib_opml to v0.5.1 (#5188 )

2023-03-10 20:04:46 +01:00

Minz

Catch extension exceptions in override (#7475 )

2025-04-01 17:55:20 +02:00

phpgt/cssxpath

Bump phpgt/cssxpath (#6618 )

2024-09-06 09:11:37 +02:00

phpmailer/phpmailer

Update phpmailer/phpmailer requirement from 6.9.2 to 6.9.3 in /lib (#7046 )

2024-12-01 20:13:27 +01:00

simplepie/simplepie

Fix regression cURL HTTP headers (#7403 )

2025-03-05 16:45:06 +01:00

.gitignore

Sync SimplePie (#6840 )

2024-09-29 16:17:26 +02:00

.htaccess

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

composer.json

SimplePie sync upstream (#7434 )

2025-03-15 11:53:34 +01:00

favicons.php

PHPStan 2.0 (#7131 )

2024-12-27 12:12:49 +01:00

http-conditional.php

PHPStan 2.0 (#7131 )

2024-12-27 12:12:49 +01:00

index.html

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

lib_date.php

Upgrade code to php 8.1 (#6748 )

2024-11-28 17:11:04 +01:00

lib_install.php

Back-compatibility cURL 7.51 (#7409 )

2025-03-08 11:49:05 +01:00

lib_rss.php

Disallow iframe srcdoc for now (#7494 )

2025-04-06 00:47:45 +02:00

README.md

Allow SimplePie updates with composer (#4374 )

2024-09-14 23:11:10 +02:00

README.md

Libraries

SimplePie

FreshRSS uses a forked version of SimplePie, with a number of patches.

See the read-me of our fork.

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.