Commit Graph

1310 Commits (a1b86519492c3416b0c848a16b11c92b31f125ff)

Author SHA1 Message Date
Andrew Dolgov a1b8651949 Revert "add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect to serve static files faster"
This reverts commit c5c3a0a2a8.
6 years ago
Andrew Dolgov 2aef804f4b split transparent rewriting of locally cached media URLs to execute after both sanitize() and HOOK_RENDER_ARTICLE to allow plugins work on original source URLs consistently 6 years ago
Andrew Dolgov c5c3a0a2a8 add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect to serve static files faster 6 years ago
Andrew Dolgov 88adf3da1b send_local_file: add application/octet-stream hack
cached_url: return original requested filename to save as
6 years ago
Andrew Dolgov c4869cd573 if PHP_VERSION check fails, show current version 6 years ago
Andrew Dolgov 75e765aa00 bump version_static 6 years ago
Andrew Dolgov 848c6ac655 bump required php version to 5.6 6 years ago
Andrew Dolgov 069aea5989 remove FEED_CRYPT_KEY and everything related to it
always assume auth_pass_encrypted is false
6 years ago
Andrew Dolgov a2d1fa5b14 autoloader: check if class name is namespaced before trying to split it 6 years ago
Andrew Dolgov df47100ad1 remove SWF enclosure audio player 6 years ago
Andrew Dolgov a9105e2a61 move JShrink Minifier to vendor/ 6 years ago
Andrew Dolgov 2aaefbfa54 update autoloader to consider namespaces for third party libraries: placed and loaded from vendor/namespace/classpath.php
update readability to a newer implementation based on Readability.js (https://github.com/andreskrey/readability.php)
add vendor/Psr/Log interface required for the above
6 years ago
Andrew Dolgov d00d515320 feedbrowser: fix incorrect usage of LIMIT in prepared statement 6 years ago
Tobias Bell af3663edec Don't bail out if git gc removed refs 6 years ago
Andrew Dolgov 68d9c412ea fetch_file_contents: allow setting http Accept header 6 years ago
Andrew Dolgov f0dbfedc81 increase buffersize to 16384 bytes
(also some trailing whitespace got clipped)
6 years ago
Alexander Yaburov 74a98a6ff2 increased CURLOPT_BUFFERSIZE from 128 to 256 6 years ago
Andrew Dolgov b14f6d58b4 implement hard limits on downloaded data size for general fetching and cache plugins: MAX_DOWNLOAD_FILE_SIZE & MAX_CACHE_FILE_SIZE 6 years ago
foobar 2008ec4ed7 change filter rule regexp type to text 6 years ago
JustAMacUser 905ff10dc9 Allow abbr tag when sanitizing. 6 years ago
Andrew Dolgov e7c9bc60ec fix previous wrt if-modified-since being added to context options headers 6 years ago
Metallizzer dd597297cb Обновить 'include/functions.php'
The "Connection: close" header is added to the context_options
6 years ago
Andrew Dolgov 3d7db21602 Merge branch 'master' of git.fakecake.org:tt-rss 6 years ago
Andrew Dolgov 8babb8e75a sanitize: disallow width and height attributes for images 6 years ago
fox 1aeb282be1 Merge branch 'save-effective-url' of JustAMacUser/tt-rss into master 6 years ago
JustAMacUser 7ae05ed790 Have fetch_file_contents() save the effective URL. 6 years ago
Andrew Dolgov 2eaf2a1f36 tag_is_valid: simplify code 6 years ago
Andrew Dolgov 7f4a404566 include: convert some spaces to tabs 7 years ago
martin scharm 32dc9ec854 undocumenting the proxy settings [see #36]
in response to https://git.tt-rss.org/git/tt-rss/pulls/36#issuecomment-119
7 years ago
martin scharm 213c01d459 some proxies require `request_fulluri` set to true [see #36]
at least polipo won't work for plain HTTP URLs (HTTPS strangely also works without `request_fulluri`..?)

see https://git.tt-rss.org/git/tt-rss/pulls/36
7 years ago
martin scharm ea55f2e11c Add proper support for proxies
There are situations where you want tt-rss to use a proxy (e.g.
because of network restrictions, or privacy concerns).
tt-rss already comes with an undocumented `_CURL_HTTP_PROXY`
variable (see eg https://binfalse.de/2015/05/06/ttrss-with-proxy/),
however that won't have an effect when, for example, php-curl is
not installed, see
c30f5e1811/include/functions.php (L377)
In this case it would use the `file_get_contents` with a stream
context without a proxy definition:
c30f5e1811/include/functions.php (L487)

Here I propose to properly support proxies, and I introduced a
`PROXY` variable, that is respected in both scenarios, with and
without curl installed.
7 years ago
Andrew Dolgov 9274109c19 search_to_sql: quote fallback search language 7 years ago
JustAMacUser 56c2216295 Add missing quotes to array_map. 7 years ago
Andrew Dolgov bed2d6e054 force-cast some variables used in queries to integer
do not display SQL query in headlines debug mode
7 years ago
Andrew Dolgov 7651b6e2cd sanitize: disable referrer via referrerpolicy for img elements 7 years ago
Andrew Dolgov 4d10b4abca merge login form css into default.css
update more hardcoded colors to use @color-accent
update @color-accent
7 years ago
Andrew Dolgov f8db5bb4db installer: use PDO, improve wording for some notices
PDO wrapper: allow working with blank DB_HOST
7 years ago
Andrew Dolgov 76fc7a2d9c bool_to_sql_bool: for some reason PDO really likes integers for boolean columns
incidentally this fixes OPML filter import
7 years ago
Andrew Dolgov c4a08e4ff0 remove mentions of deprecated.js 7 years ago
Andrew Dolgov e6532439d6 force strip_tags() on all user input unless explicitly allowed 7 years ago
Andrew Dolgov fa3bcfa379 queryfeedheadlines: there's no need to quote order_by/override_order
else: feedicon cache busting etc
7 years ago
Andrew Dolgov 7c0eb1b621 add defaultPasswordWarning nag dialog 7 years ago
Andrew Dolgov bfebf57c5f get_theme_path: fallback to css/default.css if default theme is selected 7 years ago
Andrew Dolgov 2cf93c046c pref-users: fix sorting the table 7 years ago
Andrew Dolgov 3eecebc34f sanity_check: do not invoke PDO without checking that it exists 7 years ago
Andrew Dolgov 97a5e13370 add sanity check for PDO 7 years ago
Andrew Dolgov 83303f20e0 update version static for css & db changes 7 years ago
Andrew Dolgov 09bc54c690 further stylesheet simplification related fixes 7 years ago
Andrew Dolgov 8ff3cbb32e filters: remove sql_bool_to_bool()
checkbox_to_sql_bool: return ints (???)
7 years ago
Andrew Dolgov ed5cd6eae5 get_feed_access_key: param type bullshit 7 years ago