Andrew Dolgov
74568df4ff
remove a lot of stuff from global context (functions.php), add a few helper classes instead
4 years ago
Andrew Dolgov
a4525d31b2
replace FALSE with false so that static analyzer shuts up about it
4 years ago
Andrew Dolgov
d8619b9a84
auth_internal: cast OTP code to integer before trying to check it
4 years ago
Andrew Dolgov
a817d3794d
* use get_random_bytes() for CSRF token
...
* get_random_bytes: use PHP7 random_bytes() if it is available
* validate CSRF token using hash_equals
4 years ago
Andrew Dolgov
0757ad0406
auth_internal: use type-strict comparison when checking OTP code
4 years ago
Andrew Dolgov
91e1542a82
af_proxy_http: require separate token to access imgproxy
4 years ago
Andrew Dolgov
79f102c25d
af_proxy_http: never print received data directly, always redirect to cached_url
...
cache/getUrl: basename() passed filename just in case
4 years ago
Andrew Dolgov
0758397dd8
af_redditimgur: don't add embedded blank gif image for rewritten videos
4 years ago
Andrew Dolgov
c3d14e1fa5
- fix multiple vulnerabilities in af_proxy_http
...
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
4 years ago
Andrew Dolgov
c352e872e9
core: pass found enclosures to HOOK_ARTICLE_FILTER
...
af_redditimgur: remove enclosures if we found something to embed because it's going to be a low-res thumbnail
4 years ago
Nathan Warner
f8d96543de
Created hotkeys_force_top plugin
...
Renamed swap_jk to match new naming scheme.
4 years ago
Andrew Dolgov
9ae9302b6b
implement keyboard-related changes discussed in https://community.tt-rss.org/t/changing-the-amount-of-scroll-by-arrow-key/3452/7
4 years ago
Andrew Dolgov
5e77d0062b
use intersection observer to unpack visible articles, remove Headlines.unpackVisible()
4 years ago
Andrew Dolgov
a802649d53
rename cdmScrollToId to cdmMoveToId
...
prevent smooth scrolling when going directly to an article
4 years ago
Andrew Dolgov
1f2a721905
allow overriding built-in templates via templates.local
5 years ago
Andrew Dolgov
4e74da590e
af_readability: allow get full text button to work as a toggle; in cdm, scroll to article after embedding
5 years ago
Andrew Dolgov
96fa6e3002
af_comics: split contents of subscribe/basic_info/fetch hooks into appropriate per-comic filters
5 years ago
Andrew Dolgov
ba7f7e72db
af_comics: mention that Far Side needs cached media
5 years ago
Andrew Dolgov
61168847ac
af_comics: escape all template urls
5 years ago
Andrew Dolgov
3b62150abd
use canonical fetch url for Far Side
5 years ago
Andrew Dolgov
db8a1f76c7
remove unnecessary debugging from previous
5 years ago
Andrew Dolgov
9b4053b1ea
af_comics: add experimental support for The Far Side
5 years ago
Andrew Dolgov
b159bbe55d
af_readability: sanitize content requested for embedding
5 years ago
Andrew Dolgov
3b635c7557
fix plugins/note javascript part broken by previous changeset
5 years ago
Andrew Dolgov
71ff485fbf
af_readability: add article button to embed content of a specific article
5 years ago
Andrew Dolgov
4ab3854aed
don't generate default.css, replace with themes/light.css as a default root CSS file
5 years ago
koffieanon
3a3c74dfa4
Also match images with query string (size, tokens, etc).
5 years ago
koffieanon
e89dd83f05
Spaces to tabs for consistency.
5 years ago
koffieanon
297a89c2d2
Fix bug processing found due to operator precedence.
5 years ago
Andrew Dolgov
72d0fac80c
remove version.php and VERSION global constant, do version-related things in a slightly less ridiculous way
5 years ago
Andrew Dolgov
219840341c
Af_Youtube_Embed: whitelist youtube iframes if enabled
5 years ago
Andrew Dolgov
ffa3f9309f
af_comics: support buni webtoon episodes
5 years ago
Andrew Dolgov
f6090655bf
2fa: check TOTP based on previous secret values (oops of the year, 2019)
5 years ago
Andrew Dolgov
812a6c9f16
auth_internal: fix indents
5 years ago
Andrew Dolgov
249130e58d
implement app password checking / management UI
5 years ago
Andrew Dolgov
68b0380118
add placeholder authentication via app passwords if service is passed
...
forbid logins via regular passwords for services
remove AUTH_DISABLE_OTP
5 years ago
Andrew Dolgov
178bcd4349
auth_internal: fix OTP seed checking
5 years ago
Andrew Dolgov
ef514bc4bd
add notifications for mail and password changes
...
update and shorten some other message templates
5 years ago
JustAMacUser
8459238f6c
af_comics: Use a fixed time of day when generating fake feed for GoComics. Without this the timestamp is always updated to be the time the feed is fetched, which causes the comics to keep moving to the top/bottom of the article list depending on the sort order. (Using 11:00 a.m. UTC as that should keep the date the same across the majority of time zones.)
...
Try to get the actual title for GoComics comics.
Also a little code clean up.
5 years ago
Aleksandr Beliaev
7a4d5cc724
Fix error "mb_convert_encoding(): Illegal character encoding specified"
...
modified: plugins/af_readability/init.php
5 years ago
Andrew Dolgov
e887d68f21
af_readability: require php 7.0
5 years ago
Andrew Dolgov
3e4701116d
af_readability: add missing file
5 years ago
Andrew Dolgov
10c63ed582
pluginhost: add helper methods to get private/public pluginmethod endpoint URLs
5 years ago
Andrew Dolgov
bdf29856fb
fix several leftover mentions of old (renamed) class name, duh
5 years ago
Andrew Dolgov
de5669f723
af_zz_imgproxy: rename to af_proxy_http, use priority hook loader
5 years ago
Andrew Dolgov
c34726b2b2
consistency: use DiskCache->exists() to check for present files
5 years ago
Andrew Dolgov
6914ad1f74
retire MIN_CACHE_FILE_SIZE
5 years ago
Andrew Dolgov
d2f1cbfcb1
af_zz_imgproxy: redirect to cached_url (3!!)
5 years ago
Andrew Dolgov
c6ae5fbda1
af_zz_imgproxy: redirect to cached_url if cache already exists so that urls are a bit shorter (2)
5 years ago
Andrew Dolgov
e7edaca4db
af_zz_imgproxy: redirect to cached_url if cache already exists so that urls are a bit shorter
5 years ago
Andrew Dolgov
3c075bfd21
DiskCache: more strict checking for input filenames, getUrl() is no longer static
5 years ago
Andrew Dolgov
fdb6066bf6
* HOOK_ENCLOSURE_ENTRY: pass article_id to handler
...
* DiskCache: multiple fixes; support isWritable() for cache entries, set content-disposition for send()
* public/cached_url: allow selecting files from sub-caches other than images
* plugins/Cache_Starred_Images: rework to use DiskCache, can be enabled per-user, properly handles article enclosures, etc
5 years ago
Andrew Dolgov
7602819b98
add DiskCache.send; switch af_zz_imgproxy to use DiskCache
5 years ago
Andrew Dolgov
a60297b920
remove import_export plugin (replaced with ttrss-data-migration)
5 years ago
Andrew Dolgov
088fcf8131
move more globals to more appropriate places
...
set libxml to always use internal errors
5 years ago
Andrew Dolgov
967cccb7c5
af_readability: relax non-unicode hack to apply to HTML4 meta element markup
5 years ago
Andrew Dolgov
ae376bdfbf
search_sphinx: convert contructor of the sphinx API library
5 years ago
Andrew Dolgov
fda475bd93
af_readability: fix HOOK_GET_FULL_TEXT not being installed because plugin init() is called before load_data()
5 years ago
Andrew Dolgov
adc2a51695
update plugin readability-related option names
6 years ago
Andrew Dolgov
d0a9aeaf80
move readability library to af_readability/vendor out of global vendor directory
...
af_redditimgur: use HOOK_GET_FULL_TEXT instead of invoking readability directly
6 years ago
Andrew Dolgov
6955b2e02d
plugins: add HOOK_GET_FULL_TEXT which may be used to provide full text extraction to core code and other plugins, instead of trying to invoke af_readability specifically
6 years ago
Andrew Dolgov
c7ad4ad2d4
import_export: use default ts_lang if user one is unset
6 years ago
Andrew Dolgov
d32e191ad7
import_export: set tsvector_combined using DEFAULT_SEARCH_LANGUAGE on import
6 years ago
Andrew Dolgov
d7282ec292
import_export: prevent form closing before doing anything; update markup
6 years ago
Andrew Dolgov
671f4cee65
domdocument: remove old meta charset unicode hacks, replace with shorter xml preamble utf8 hack (on loadhtml where it makes sense)
...
af_readability: better (?) charset hack for non-unicode pages
6 years ago
Andrew Dolgov
01b2f0a24f
support "picture" tags in articles
6 years ago
Michael Kuhn
bbb8a2e873
Fix missed hotkeys in googlereaderkeys plugin
6 years ago
Rodney Stromlund
7daf009a7f
Add set_basic_feed_info hook to af_comics to fix GoComics title and url.
6 years ago
Michael Kuhn
e74f7bde22
Refactor hotkeys to use keypress instead of keydown
...
keydown returns the "raw" key in event.which. Depending on the keyboard
layout, this may not be what is wanted. For example, on a German
keyboard, Shift+7 has to be pressed to get a slash. However, event.which
will be 55, which corresponds to "7". In the keypress event, however,
event.which will be 47, which corresponds to "/".
Sadly, several important keys (such as escape and the arrow keys) do not
trigger a keypress event. Therefore, they have to be handled using a
keydown event.
This change refactors the hotkey support to make use of keypress events
whenever possible. This will make hotkeys work regardless of the user's
keyboard layout. Escape and arrow keys are still handled via keydown
events.
There should be only one change in behavior: I could not make Ctrl+/
work and therefore rebound the help dialog to "?".
6 years ago
Andrew Dolgov
19f162dbe3
css: insensitive -> text-muted
6 years ago
Andrew Dolgov
684a1368e9
toggle_sidebar: switch icon on click
6 years ago
Andrew Dolgov
2b54413599
af_redditimgur: update prefs markup
6 years ago
Andrew Dolgov
fb62f2b970
toggle_sidebar: use hamburger icon
6 years ago
Andrew Dolgov
cee76f4d49
bookmarklets: add more info link
6 years ago
Andrew Dolgov
cbd119c7a3
pref-prefs: fix markup
6 years ago
Andrew Dolgov
54c1b5c611
fill in some missing doctypes; use short doctype where it wasn't
6 years ago
Andrew Dolgov
abfd552962
plugins: update markup
6 years ago
Andrew Dolgov
335147e572
dialogs: use semantic markup instead of dlgsec stuff
...
continue unifying quoting style for html strings
6 years ago
Andrew Dolgov
55b032a6bd
plugins/share: update layout
6 years ago
Andrew Dolgov
4e253add8c
UI: add some more info links to relevant wiki pages; minor layout updates
6 years ago
Andrew Dolgov
fd8f8c7b3e
af_readability: construct readability object inside try-catch block
6 years ago
Andrew Dolgov
1a8770f8f4
add plugins/hotkeys_noscroll
6 years ago
Andrew Dolgov
4d9141d762
simplify dlgSec-related markup
6 years ago
Andrew Dolgov
3b057d5f02
OTP: css fixes
6 years ago
Andrew Dolgov
1d2da64572
af_redditimgur: apparently imgur has link rel='image_src' now, let's use it
6 years ago
Andrew Dolgov
a5517fe857
fetch_file_contents: decompress gzipped data
...
af_readability: remove utf8 preamble hack
6 years ago
Andrew Dolgov
0efb6e1bc2
remove pub_set.png, replace usages with iconfont
6 years ago
Andrew Dolgov
e53959322b
plugins/embed_original: move to attic repo
6 years ago
Andrew Dolgov
1b4567a973
remove vf_shared pixmap
6 years ago
Andrew Dolgov
e54db22998
close_button: use vector icon
6 years ago
Andrew Dolgov
607ede512f
center previously centered text on single line dialog panels
6 years ago
Andrew Dolgov
4036b479f9
share plugin: fix unshare()
6 years ago
Andrew Dolgov
a400a8ffc1
add PluginHost.HOOK_INIT_COMPLETE (and make no_title_counters use it)
6 years ago
Andrew Dolgov
b96beeeda7
bookmarklets: show pref link-buttons properly
6 years ago
Andrew Dolgov
bd66a9ef28
render article on the client using headlines data
6 years ago
Andrew Dolgov
7adf937936
shorten_expanded: use dojo button, don't break attachment dropdown, other fixes
6 years ago
Andrew Dolgov
165eea32e8
af_psql_trgm: fix parameter not being quoted properly in showrelated
6 years ago
Andrew Dolgov
a68b150601
remove separate classes for various panels, unify under .panel
...
remove a few other unnecessary css classes/ids
6 years ago
Andrew Dolgov
b68ee9adf4
af_comics: add Stonetoss
6 years ago
Andrew Dolgov
4cbc62d2a5
article note format updates
6 years ago