Files
FreshRSS/lib
Inverle 4e5e142cd0 Remove vulnerable and unused code path for displaying errors (#9395)
If we were to remove or rename `errorController`, an HTML injection could potentially be introduced due to the fallback code path, that directly echoes the logs without any escaping.

(but mainly removing it to reduce the amount of code, and since it's unused)
2026-10-03 23:28:39 +02:00
..
2026-03-29 11:39:52 +02:00
2026-05-15 12:12:28 +02:00

Libraries

SimplePie

FreshRSS uses a forked version of SimplePie, with a number of patches.

See the read-me of our fork.

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.