mirror of https://github.com/FreshRSS/FreshRSS.git synced 2025-12-23 21:47:44 -05:00

Files

Alexandre Alapetite eaf69f591f SimplePie Fix regex backtrack limit in clean_hash() (#7813 )

https://github.com/FreshRSS/simplepie/pull/48
and merge upstream https://github.com/FreshRSS/simplepie/pull/49
fix https://github.com/FreshRSS/FreshRSS/issues/7807
We had a risk of hitting `Backtrack limit was exhausted` in case of open XML comment `<!--` not closed and followed by a very long document.
Fixed by:
* Limiting the max length of the comment
* Stopping at an apparent end of CDATA section `]]>` as it is likely an error

It does not matter much if there are rare cases when the regex does not work perfectly, as it is only used for a cache hint.

2025-08-11 00:52:09 +02:00

core-extensions

New JS attribute: data-auto-leave-validation (#7785 )

2025-08-08 17:39:38 +02:00

marienfressinaud/lib_opml

Update lib_opml to v0.5.1 (#5188 )

2023-03-10 20:04:46 +01:00

Minz

Show warning when unsafe CSP policy is in use (#7804 )

2025-08-09 21:47:39 +02:00

phpgt/cssxpath

Bump phpgt/cssxpath (#6618 )

2024-09-06 09:11:37 +02:00

phpmailer/phpmailer

PHPMailer 6.10.0 (#7542 )

2025-05-03 22:34:39 +02:00

simplepie/simplepie

SimplePie Fix regex backtrack limit in clean_hash() (#7813 )

2025-08-11 00:52:09 +02:00

.gitignore

Sync SimplePie (#6840 )

2024-09-29 16:17:26 +02:00

.htaccess

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

composer.json

SimplePie Fix regex backtrack limit in clean_hash() (#7813 )

2025-08-11 00:52:09 +02:00

favicons.php

Rework fetch favicons (#7767 )

2025-08-01 08:30:49 +02:00

http-conditional.php

PHPStan 2.0 (#7131 )

2024-12-27 12:12:49 +01:00

index.html

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

lib_date.php

Upgrade code to php 8.1 (#6748 )

2024-11-28 17:11:04 +01:00

lib_install.php

Back-compatibility cURL 7.51 (#7409 )

2025-03-08 11:49:05 +01:00

lib_rss.php

PHPStan: finalise strictArrayFilter (#7794 )

2025-08-07 22:19:45 +02:00

README.md

Allow SimplePie updates with composer (#4374 )

2024-09-14 23:11:10 +02:00

README.md

Libraries

SimplePie

FreshRSS uses a forked version of SimplePie, with a number of patches.

See the read-me of our fork.

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.