mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-11-04 16:42:58 -05:00
* WebSub: Implement support for hub.secret https://www.w3.org/TR/websub/#signing-content Fix https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-498g-vgpq-mr66 `hub.secret` is optional, but improves security. Reported by @Atharros * hub.secret SHOULD only be specified when the request was made over HTTPS * Minor whitespace * Add legacy support