Commit Graph

766 Commits (0832dd9d40c703d5d0bebf7f2392174acb602ec2)

Author SHA1 Message Date
Andrew Dolgov 5849a39820 af_redditimgur: don't try to load empty html; fix a warning in update debugger 4 years ago
Andrew Dolgov ce489a724b fix a few more warnings 4 years ago
Andrew Dolgov 9fdeb58fd3 check a few more php8 warnings 4 years ago
Andrew Dolgov 6e774a58fe more php8 fixes mostly related to login 4 years ago
Andrew Dolgov 403dca154c initial WIP for php8; bump php version requirement to 7.0 4 years ago
Andrew Dolgov 6c546f37ba af_redditimgur: handle youtube /embed/ URLs 4 years ago
Andrew Dolgov b30b354b53 af_redditimgur: add some last minute handling for generic preview media URLs provided in JSON 4 years ago
Andrew Dolgov 0d1336bd29 af_redditimgur:
* draw a basic form for testurl() if no url is given
 * only process specific JSON media files/child elements until something is found
 * handle generic preview images for self posts (not link posts because
link is handled afterwards)
4 years ago
Andrew Dolgov 1ded706f8f af_redditimgur: cleanup, rework to embed stuff from reddit-provided JSON first 4 years ago
Andrew Dolgov 41bde84a92 af_redditimgur: add basic support for reddit galleries 4 years ago
Andrew Dolgov 4e95591087 af_redditimgur: shorten href stuff 4 years ago
Andrew Dolgov 7a2ad08a7d scored_oldest_first: update sort caption 4 years ago
Andrew Dolgov c82457e534 add plugins/scored_oldest_first 4 years ago
Andrew Dolgov 6d4005f984 af_psql_trgm:
1. better debugging output
2. fix incorrect default values being used sometimes
3. remove special workaround for equal titles because trgm extension
seems to be working properly for those now (tested on postgres 11)
4. code cleanup
4 years ago
Andrew Dolgov 0868ff9d64 auth_remote: use empty() instead of isset() while checking headers 4 years ago
Andrew Dolgov dc40f69511 fix auth_remote broken by previous commit 4 years ago
Andrew Dolgov 8a34084df1 auth_remote: rewrite header checking to be more readable 4 years ago
Andrew Dolgov 8764662138 af_redditimgur: also blacklist in-content links 4 years ago
Tony 564a24fd78 Add support for HTTP_REMOTE_USER variable for user authentication 4 years ago
Andrew Dolgov 9e62513095 af_redditimgur: also rewrite in the API handler 4 years ago
Andrew Dolgov f25ea5355c af_redditimgur: add option to rewrite reddit URLs to teddit.net 4 years ago
Andrew Dolgov 50d089ae59 redditimgur: blacklist github because it usually resolves to a huge profile photo of someone 4 years ago
wn 6f31372b37 Address param order deprecation warning for 'af_redditimgur'. 4 years ago
Andrew Dolgov 65254f5db4 - move sphinx plugin to a separate repo
- regenerate config checks without sphinx-related variables
4 years ago
Andrew Dolgov 43bd3394c3 shorten_expanded: remove loading=lazy from images if enabled 4 years ago
Andrew Dolgov 8479421da4 af_readability: allow appending to original summary instead of always
replacing it, some minor code cleanup
4 years ago
JustAMacUser 65b3926ae5 Ensure proxy_all setting is saved in database. 4 years ago
Andrew Dolgov 38a7a1da88 hide uninteresting errors in several DOMDocument->loadHTML() invocations 4 years ago
Andrew Dolgov 215f388992 move timestamp-related stuff to a separate class 4 years ago
Andrew Dolgov 74568df4ff remove a lot of stuff from global context (functions.php), add a few helper classes instead 4 years ago
Andrew Dolgov a4525d31b2 replace FALSE with false so that static analyzer shuts up about it 4 years ago
Andrew Dolgov d8619b9a84 auth_internal: cast OTP code to integer before trying to check it 4 years ago
Andrew Dolgov a817d3794d * use get_random_bytes() for CSRF token
* get_random_bytes: use PHP7 random_bytes() if it is available
* validate CSRF token using hash_equals
4 years ago
Andrew Dolgov 0757ad0406 auth_internal: use type-strict comparison when checking OTP code 4 years ago
Andrew Dolgov 91e1542a82 af_proxy_http: require separate token to access imgproxy 4 years ago
Andrew Dolgov 79f102c25d af_proxy_http: never print received data directly, always redirect to cached_url
cache/getUrl: basename() passed filename just in case
4 years ago
Andrew Dolgov 0758397dd8 af_redditimgur: don't add embedded blank gif image for rewritten videos 4 years ago
Andrew Dolgov c3d14e1fa5 - fix multiple vulnerabilities in af_proxy_http
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
4 years ago
Andrew Dolgov c352e872e9 core: pass found enclosures to HOOK_ARTICLE_FILTER
af_redditimgur: remove enclosures if we found something to embed because it's going to be a low-res thumbnail
4 years ago
Nathan Warner f8d96543de Created hotkeys_force_top plugin
Renamed swap_jk to match new naming scheme.
5 years ago
Andrew Dolgov 9ae9302b6b implement keyboard-related changes discussed in https://community.tt-rss.org/t/changing-the-amount-of-scroll-by-arrow-key/3452/7 5 years ago
Andrew Dolgov 5e77d0062b use intersection observer to unpack visible articles, remove Headlines.unpackVisible() 5 years ago
Andrew Dolgov a802649d53 rename cdmScrollToId to cdmMoveToId
prevent smooth scrolling when going directly to an article
5 years ago
Andrew Dolgov 1f2a721905 allow overriding built-in templates via templates.local 5 years ago
Andrew Dolgov 4e74da590e af_readability: allow get full text button to work as a toggle; in cdm, scroll to article after embedding 5 years ago
Andrew Dolgov 96fa6e3002 af_comics: split contents of subscribe/basic_info/fetch hooks into appropriate per-comic filters 5 years ago
Andrew Dolgov ba7f7e72db af_comics: mention that Far Side needs cached media 5 years ago
Andrew Dolgov 61168847ac af_comics: escape all template urls 5 years ago
Andrew Dolgov 3b62150abd use canonical fetch url for Far Side 5 years ago
Andrew Dolgov db8a1f76c7 remove unnecessary debugging from previous 5 years ago
Andrew Dolgov 9b4053b1ea af_comics: add experimental support for The Far Side 5 years ago
Andrew Dolgov b159bbe55d af_readability: sanitize content requested for embedding 5 years ago
Andrew Dolgov 3b635c7557 fix plugins/note javascript part broken by previous changeset 5 years ago
Andrew Dolgov 71ff485fbf af_readability: add article button to embed content of a specific article 5 years ago
Andrew Dolgov 4ab3854aed don't generate default.css, replace with themes/light.css as a default root CSS file 5 years ago
koffieanon 3a3c74dfa4 Also match images with query string (size, tokens, etc). 5 years ago
koffieanon e89dd83f05 Spaces to tabs for consistency. 5 years ago
koffieanon 297a89c2d2 Fix bug processing found due to operator precedence. 5 years ago
Andrew Dolgov 72d0fac80c remove version.php and VERSION global constant, do version-related things in a slightly less ridiculous way 5 years ago
Andrew Dolgov 219840341c Af_Youtube_Embed: whitelist youtube iframes if enabled 5 years ago
Andrew Dolgov ffa3f9309f af_comics: support buni webtoon episodes 5 years ago
Andrew Dolgov f6090655bf 2fa: check TOTP based on previous secret values (oops of the year, 2019) 5 years ago
Andrew Dolgov 812a6c9f16 auth_internal: fix indents 5 years ago
Andrew Dolgov 249130e58d implement app password checking / management UI 5 years ago
Andrew Dolgov 68b0380118 add placeholder authentication via app passwords if service is passed
forbid logins via regular passwords for services
remove AUTH_DISABLE_OTP
5 years ago
Andrew Dolgov 178bcd4349 auth_internal: fix OTP seed checking 5 years ago
Andrew Dolgov ef514bc4bd add notifications for mail and password changes
update and shorten some other message templates
5 years ago
JustAMacUser 8459238f6c af_comics: Use a fixed time of day when generating fake feed for GoComics. Without this the timestamp is always updated to be the time the feed is fetched, which causes the comics to keep moving to the top/bottom of the article list depending on the sort order. (Using 11:00 a.m. UTC as that should keep the date the same across the majority of time zones.)
Try to get the actual title for GoComics comics.

Also a little code clean up.
5 years ago
Aleksandr Beliaev 7a4d5cc724 Fix error "mb_convert_encoding(): Illegal character encoding specified"
modified:   plugins/af_readability/init.php
5 years ago
Andrew Dolgov e887d68f21 af_readability: require php 7.0 5 years ago
Andrew Dolgov 3e4701116d af_readability: add missing file 5 years ago
Andrew Dolgov 10c63ed582 pluginhost: add helper methods to get private/public pluginmethod endpoint URLs 5 years ago
Andrew Dolgov bdf29856fb fix several leftover mentions of old (renamed) class name, duh 5 years ago
Andrew Dolgov de5669f723 af_zz_imgproxy: rename to af_proxy_http, use priority hook loader 5 years ago
Andrew Dolgov c34726b2b2 consistency: use DiskCache->exists() to check for present files 5 years ago
Andrew Dolgov 6914ad1f74 retire MIN_CACHE_FILE_SIZE 5 years ago
Andrew Dolgov d2f1cbfcb1 af_zz_imgproxy: redirect to cached_url (3!!) 5 years ago
Andrew Dolgov c6ae5fbda1 af_zz_imgproxy: redirect to cached_url if cache already exists so that urls are a bit shorter (2) 5 years ago
Andrew Dolgov e7edaca4db af_zz_imgproxy: redirect to cached_url if cache already exists so that urls are a bit shorter 5 years ago
Andrew Dolgov 3c075bfd21 DiskCache: more strict checking for input filenames, getUrl() is no longer static 5 years ago
Andrew Dolgov fdb6066bf6 * HOOK_ENCLOSURE_ENTRY: pass article_id to handler
* DiskCache: multiple fixes; support isWritable() for cache entries, set content-disposition for send()
* public/cached_url: allow selecting files from sub-caches other than images
* plugins/Cache_Starred_Images: rework to use DiskCache, can be enabled per-user, properly handles article enclosures, etc
5 years ago
Andrew Dolgov 7602819b98 add DiskCache.send; switch af_zz_imgproxy to use DiskCache 5 years ago
Andrew Dolgov a60297b920 remove import_export plugin (replaced with ttrss-data-migration) 5 years ago
Andrew Dolgov 088fcf8131 move more globals to more appropriate places
set libxml to always use internal errors
6 years ago
Andrew Dolgov 967cccb7c5 af_readability: relax non-unicode hack to apply to HTML4 meta element markup 6 years ago
Andrew Dolgov ae376bdfbf search_sphinx: convert contructor of the sphinx API library 6 years ago
Andrew Dolgov fda475bd93 af_readability: fix HOOK_GET_FULL_TEXT not being installed because plugin init() is called before load_data() 6 years ago
Andrew Dolgov adc2a51695 update plugin readability-related option names 6 years ago
Andrew Dolgov d0a9aeaf80 move readability library to af_readability/vendor out of global vendor directory
af_redditimgur: use HOOK_GET_FULL_TEXT instead of invoking readability directly
6 years ago
Andrew Dolgov 6955b2e02d plugins: add HOOK_GET_FULL_TEXT which may be used to provide full text extraction to core code and other plugins, instead of trying to invoke af_readability specifically 6 years ago
Andrew Dolgov c7ad4ad2d4 import_export: use default ts_lang if user one is unset 6 years ago
Andrew Dolgov d32e191ad7 import_export: set tsvector_combined using DEFAULT_SEARCH_LANGUAGE on import 6 years ago
Andrew Dolgov d7282ec292 import_export: prevent form closing before doing anything; update markup 6 years ago
Andrew Dolgov 671f4cee65 domdocument: remove old meta charset unicode hacks, replace with shorter xml preamble utf8 hack (on loadhtml where it makes sense)
af_readability: better (?) charset hack for non-unicode pages
6 years ago
Andrew Dolgov 01b2f0a24f support "picture" tags in articles 6 years ago
Michael Kuhn bbb8a2e873 Fix missed hotkeys in googlereaderkeys plugin 6 years ago
Rodney Stromlund 7daf009a7f Add set_basic_feed_info hook to af_comics to fix GoComics title and url. 6 years ago
Michael Kuhn e74f7bde22 Refactor hotkeys to use keypress instead of keydown
keydown returns the "raw" key in event.which. Depending on the keyboard
layout, this may not be what is wanted. For example, on a German
keyboard, Shift+7 has to be pressed to get a slash. However, event.which
will be 55, which corresponds to "7". In the keypress event, however,
event.which will be 47, which corresponds to "/".

Sadly, several important keys (such as escape and the arrow keys) do not
trigger a keypress event. Therefore, they have to be handled using a
keydown event.

This change refactors the hotkey support to make use of keypress events
whenever possible. This will make hotkeys work regardless of the user's
keyboard layout. Escape and arrow keys are still handled via keydown
events.

There should be only one change in behavior: I could not make Ctrl+/
work and therefore rebound the help dialog to "?".
6 years ago
Andrew Dolgov 19f162dbe3 css: insensitive -> text-muted 6 years ago
Andrew Dolgov 684a1368e9 toggle_sidebar: switch icon on click 6 years ago