AdamKorczandAlexandre Alapetite dc5cf8221b Limit the length and parentheses nesting depth of a search query (#9277) ...

* Limit the length and parentheses nesting depth of a search query.

* Use exception

---------

Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>

2026-09-09 16:12:41 +02:00

..

ActionController.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

AttributesTrait.php

Add some missing PHP native types (#7191)

2025-01-08 13:26:09 +01:00

Auth.php

Fix auth CSRFs (login and register actions) (#9171)

2026-09-08 09:19:01 +02:00

BooleanSearch.php

Limit the length and parentheses nesting depth of a search query (#9277)

2026-09-09 16:12:41 +02:00

Category.php

Ignore security-relevant OPML attributes for dynamic OPML sources (#9276)

2026-09-09 16:11:38 +02:00

CategoryDAO.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

CategoryDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

CategoryDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Context.php

Limit the length and parentheses nesting depth of a search query (#9277)

2026-09-09 16:12:41 +02:00

DatabaseDAO.php

Fix all broken links in the entire repository (#9207)

2026-08-19 16:19:21 +02:00

DatabaseDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

DatabaseDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

Entry.php

Only allow http/https URI schemes for enclosure and thumbnail URLs (#9272)

2026-09-09 00:14:13 +02:00

EntryDAO.php

Fix all broken links in the entire repository (#9207)

2026-08-19 16:19:21 +02:00

EntryDAOPGSQL.php

PostgreSQL: make commitNewEntries resilient to duplicate keys (#9231)

2026-08-26 12:20:16 +02:00

EntryDAOSQLite.php

Fix marking filtered label articles as read in SQLite and PostgreSQL (#9264)

2026-09-06 17:44:14 +02:00

Factory.php

Stable IDs during SQL import (#7988)

2025-09-27 15:11:55 +02:00

Feed.php

Only allow http/https URI schemes for enclosure and thumbnail URLs (#9272)

2026-09-09 00:14:13 +02:00

FeedDAO.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

FeedDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FeedDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

FilterAction.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FilterActionsTrait.php

Fix unwanted expansion of user queries in some cases (#8395)

2026-01-03 16:52:33 +01:00

FormAuth.php

Log invalid challenge and ignore JSON error during login (#9278)

2026-09-09 16:11:05 +02:00

Log.php

Fix log CRLF injection (#7883)

2025-08-31 20:05:30 +02:00

LogDAO.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

ReadingMode.php

PHPStan 2.0 (#7131)

2024-12-27 12:12:49 +01:00

Search.php

Fix lost elements while parsing search query (#8884)

2026-05-24 20:23:58 +02:00

Share.php

Feeds tree: sort feed names with locale-aware collation (#8985)

2026-07-07 15:42:12 +02:00

SimplePieCustom.php

Fix: infinite recursion in sanitizeHTML() when maxLength truncation doesn't converge (#9043)

2026-08-28 08:47:04 +02:00

SimplePieFetch.php

Disallow fetching of non remote uri (#9215)

2026-08-19 15:24:09 +02:00

StatsDAO.php

Fix statistics repartition averages (#8996)

2026-07-07 10:42:53 +02:00

StatsDAOPGSQL.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

StatsDAOSQLite.php

SQL improve PHP syntax uniformity (#8604)

2026-03-15 14:44:39 +01:00

SystemConfiguration.php

Add SSRF mitigations using filter_var and CURLOPT_RESOLVE (#8400)

2026-06-28 18:51:04 +02:00

Tag.php

Fix bigint timestamps on 32-bit (#7375)

2025-02-26 17:01:25 +01:00

TagDAO.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

TagDAOPGSQL.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

TagDAOSQLite.php

Fix tagging an already-tagged entry on PostgreSQL (#9136)

2026-07-23 13:52:09 +02:00

Themes.php

Disallow setting non-existent theme (#7722)

2025-07-07 23:32:35 +02:00

UserConfiguration.php

Add option to keep or reset article sort order when navigating (#8969)

2026-07-07 11:04:31 +02:00

UserDAO.php

Merge commit from fork

2026-01-03 18:09:44 +01:00

UserQuery.php

Limit the length and parentheses nesting depth of a search query (#9277)

2026-09-09 16:12:41 +02:00

View.php

Offer to add a prefix when resharing user labels (#9236)

2026-08-28 08:51:57 +02:00

ViewJavascript.php

Fix regressions on some array structures (#7155)

2024-12-28 23:58:00 +01:00

ViewMode.php

Add hook enums (#8036)

2025-09-30 22:59:41 +02:00

ViewStats.php

New stats overview of dates with most unread articles (#8089)

2025-10-14 11:05:17 +02:00