mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-06-29 09:45:30 -04:00

Files

Inverle 1349c7c1a9 SimplePie: Disallow javascript: URI protocol (#8263 )

Follow-up of https://github.com/FreshRSS/FreshRSS/pull/7924
https://github.com/FreshRSS/simplepie/pull/80
https://github.com/FreshRSS/simplepie/pull/65

* SimplePie: Disallow `javascript:` URI protocol

* Sync SimplePie

* Update code to work with SimplePie again

* Partial revert previous commit

* Bump SimplePie

---------

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>

2026-06-13 21:15:36 +02:00

core-extensions

Update user modify date when changing UserJS/UserCSS (#8607 )

2026-03-15 13:52:57 +01:00

marienfressinaud/lib_opml

Fix LibOPML warnings (#8652 )

2026-05-15 12:12:28 +02:00

Minz

chore(deps-dev): bump phpstan/phpstan from 2.1.55 to 2.2.1 (#8906 )

2026-06-03 12:52:45 +02:00

phpgt/cssxpath

CSSXPath 1.5.0 (#8642 )

2026-03-29 11:39:52 +02:00

phpmailer/phpmailer

chore(deps): update phpmailer/phpmailer requirement from 7.0.2 to 7.1.1 in /lib (#8907 )

2026-06-03 13:06:28 +02:00

simplepie/simplepie

SimplePie: Disallow javascript: URI protocol (#8263 )

2026-06-13 21:15:36 +02:00

.gitignore

Fix LibOPML warnings (#8652 )

2026-05-15 12:12:28 +02:00

.htaccess

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

composer.json

SimplePie: Disallow javascript: URI protocol (#8263 )

2026-06-13 21:15:36 +02:00

favicons.php

Add checkUrl() to favicon functions (#8714 )

2026-04-23 15:01:07 +02:00

http-conditional.php

Fix minor backslashes (#8292 )

2025-12-07 20:27:06 +01:00

index.html

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

lib_date.php

Filter on last user modified (#8093 )

2025-10-15 00:12:19 +02:00

lib_install.php

Improve configuration checks (#8334 )

2025-12-21 19:26:08 +01:00

lib_rss.php

Bump phpstan/phpstan from 2.1.46 to 2.1.54 (#8753 )

2026-05-02 21:16:27 +02:00

README.md

Allow SimplePie updates with composer (#4374 )

2024-09-14 23:11:10 +02:00

README.md

Libraries

SimplePie

FreshRSS uses a forked version of SimplePie, with a number of patches.

See the read-me of our fork.

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.