Alexandre Alapetite d4964dc1ff WebSub: Implement support for hub.secret (#9430) ...

* WebSub: Implement support for hub.secret
https://www.w3.org/TR/websub/#signing-content
Fix https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-498g-vgpq-mr66
`hub.secret` is optional, but improves security.
Reported by @Atharros

* hub.secret SHOULD only be specified when the request was made over HTTPS

* Minor whitespace

* Add legacy support

2026-10-30 22:25:33 +01:00

..

ActionController.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

AttributesTrait.php

Add some missing PHP native types (#7191)

2025-01-08 13:26:09 +01:00

Auth.php

Mitigate some 404 situations (#9435)

2026-10-15 16:11:21 +02:00

BooleanSearch.php

Config + increase default values for search max length and depth (#9280)

2026-09-10 22:14:55 +02:00

Category.php

32-bit systems provide a string for BIGINT (#9486)

2026-10-22 22:35:47 +02:00

CategoryDAO.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

CategoryDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

CategoryDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Context.php

Fix adaptive reading state after marking articles read (#9290)

2026-09-11 08:18:09 +02:00

DatabaseDAO.php

Fix all broken links in the entire repository (#9207)

2026-08-19 16:19:21 +02:00

DatabaseDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

DatabaseDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Entry.php

Translate non-English code comments and identifiers (#9383)

2026-10-20 09:52:31 +02:00

EntryDAO.php

Fixes for PHPStan 2.2.16 (#9368)

2026-09-30 15:49:06 +02:00

EntryDAOPGSQL.php

PostgreSQL: make commitNewEntries resilient to duplicate keys (#9231)

2026-08-26 12:20:16 +02:00

EntryDAOSQLite.php

Fix PHP 8.5+ deprecation sqliteCreateFunction (#9421)

2026-10-08 22:55:00 +02:00

Factory.php

Stable IDs during SQL import (#7988)

2025-09-27 15:11:55 +02:00

Feed.php

WebSub: Implement support for hub.secret (#9430)

2026-10-30 22:25:33 +01:00

FeedDAO.php

Fix muting of feeds gone with HTTP 410 (#9391)

2026-10-03 09:59:51 +02:00

FeedDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FeedDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FilterAction.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FilterActionsTrait.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FormAuth.php

Replace bcrypt challenge auth with direct password comparison (#9358)

2026-10-30 22:21:26 +01:00

Log.php

Fix log CRLF injection (#7883)

2025-08-31 20:05:30 +02:00

LogDAO.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

ReadingMode.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

Search.php

Fix lost elements while parsing search query (#8884)

2026-05-24 20:23:58 +02:00

Share.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

SimplePieCustom.php

Sanitizer: block data: URI scheme while keeping data:image for images (#9417)

2026-10-11 20:36:09 +02:00

SimplePieFetch.php

Require PHP 8.2+ (#9470)

2026-10-26 21:02:32 +01:00

StatsDAO.php

Fix statistics repartition averages (#8996)

2026-07-07 10:42:53 +02:00

StatsDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

StatsDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

SystemConfiguration.php

Add SSRF mitigations using filter_var and CURLOPT_RESOLVE (#8400)

2026-06-28 18:51:04 +02:00

Tag.php

Fix bigint timestamps on 32-bit (#7375)

2025-02-26 17:01:25 +01:00

TagDAO.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

TagDAOPGSQL.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

TagDAOSQLite.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

Themes.php

Disallow setting non-existent theme (#7722)

2025-07-07 23:32:35 +02:00

UserConfiguration.php

Add option to keep or reset article sort order when navigating (#8969)

2026-07-07 11:04:31 +02:00

UserDAO.php

Merge commit from fork

2026-01-03 18:09:44 +01:00

UserQuery.php

Limit the length and parentheses nesting depth of a search query (#9277)

2026-09-09 16:12:41 +02:00

View.php

Translate non-English code comments and identifiers (#9383)

2026-10-20 09:52:31 +02:00

ViewJavascript.php

Replace bcrypt challenge auth with direct password comparison (#9358)

2026-10-30 22:21:26 +01:00

ViewMode.php

Require PHP 8.2+ (#9470)

2026-10-26 21:02:32 +01:00

ViewStats.php

New stats overview of dates with most unread articles (#8089)

2025-10-14 11:05:17 +02:00