905ff10dc9
Allow abbr tag when sanitizing.
7 years ago
e7c9bc60ec
fix previous wrt if-modified-since being added to context options headers
7 years ago
dd597297cb
Обновить 'include/functions.php'
...
The "Connection: close" header is added to the context_options
7 years ago
3d7db21602
Merge branch 'master' of git.fakecake.org:tt-rss
7 years ago
8babb8e75a
sanitize: disallow width and height attributes for images
7 years ago
1aeb282be1
Merge branch 'save-effective-url' of JustAMacUser/tt-rss into master
7 years ago
7ae05ed790
Have fetch_file_contents() save the effective URL.
7 years ago
2eaf2a1f36
tag_is_valid: simplify code
7 years ago
7f4a404566
include: convert some spaces to tabs
7 years ago
32dc9ec854
undocumenting the proxy settings [see #36 ]
...
in response to https://git.tt-rss.org/git/tt-rss/pulls/36#issuecomment-119
7 years ago
213c01d459
some proxies require `request_fulluri` set to true [see #36 ]
...
at least polipo won't work for plain HTTP URLs (HTTPS strangely also works without `request_fulluri`..?)
see https://git.tt-rss.org/git/tt-rss/pulls/36
7 years ago
ea55f2e11c
Add proper support for proxies
...
There are situations where you want tt-rss to use a proxy (e.g.
because of network restrictions, or privacy concerns).
tt-rss already comes with an undocumented `_CURL_HTTP_PROXY`
variable (see eg https://binfalse.de/2015/05/06/ttrss-with-proxy/ ),
however that won't have an effect when, for example, php-curl is
not installed, see
c30f5e1811/include/functions.php (L377)c30f5e1811/include/functions.php (L487)
7 years ago
9274109c19
search_to_sql: quote fallback search language
7 years ago
56c2216295
Add missing quotes to array_map.
7 years ago
bed2d6e054
force-cast some variables used in queries to integer
...
do not display SQL query in headlines debug mode
7 years ago
7651b6e2cd
sanitize: disable referrer via referrerpolicy for img elements
7 years ago
76fc7a2d9c
bool_to_sql_bool: for some reason PDO really likes integers for boolean columns
...
incidentally this fixes OPML filter import
7 years ago
c4a08e4ff0
remove mentions of deprecated.js
7 years ago
e6532439d6
force strip_tags() on all user input unless explicitly allowed
7 years ago
fa3bcfa379
queryfeedheadlines: there's no need to quote order_by/override_order
...
else: feedicon cache busting etc
7 years ago
7c0eb1b621
add defaultPasswordWarning nag dialog
7 years ago
bfebf57c5f
get_theme_path: fallback to css/default.css if default theme is selected
7 years ago
2cf93c046c
pref-users: fix sorting the table
7 years ago
8ff3cbb32e
filters: remove sql_bool_to_bool()
...
checkbox_to_sql_bool: return ints (???)
7 years ago
ed5cd6eae5
get_feed_access_key: param type bullshit
7 years ago
7d960ce7e9
auth_internal: use PDO + other fixes
7 years ago
4ee398a41e
Merge branch 'master' of git.fakecake.org:tt-rss into pdo-experimental
7 years ago
1e78803c44
search_to_sql: leftover tsquery query fix for pgsql
7 years ago
a2d77092fe
search_to_sql: quoting fix
7 years ago
0002e598f8
sql_bool_to_bool: backwards compat fix
7 years ago
e4befe6bf4
fix label cache being double escaped on save
...
remove some old-style escaping
7 years ago
ef83c69404
more boolean fixes
7 years ago
da9ea57d1c
checkbox to sql bool related changes, some more boolean fixes
7 years ago
7ccb4e91ff
boolean handling changes which probably won't break everything
7 years ago
c949a9282e
OPML: use PDO; minor fixes
7 years ago
fbe7cb0a48
rpc: switch to PDO
7 years ago
ecf6baaa1c
fix add_feed_category
7 years ago
cc9450c309
ccache, misc: fixes
...
feeds: start PDO transition
7 years ago
1271407eea
public: partial conversion to PDO, misc fixes
7 years ago
cab58c44ae
some minor PDO-related fixes
7 years ago
c9d5c26041
auth/base: PDO
...
functions: fix small pdo-related bug
7 years ago
fdda3e4efb
pdo pdo pdo
7 years ago
4d13514dd4
sessions: PDO
7 years ago
a21f7495ae
more pdo stuff
7 years ago
90dafaa9f6
add qmarks function
7 years ago
b78a6f08b6
more pdo stuff i guess
7 years ago
7c4d7bce3f
increase default of MAX_CONDITIONAL_INTERVAL to 12 hours
7 years ago
8aa568b3a2
some more pdo stuff
7 years ago
bfc54b0369
Merge branch 'pdo-experimental' of git.fakecake.org:tt-rss into pdo-experimental
7 years ago
e50c8eaa4e
enforce unconditional requests every 6 hours even if server claims data is not modified
7 years ago
ecd2e414bd
add ttrss_feeds.last_unconditional (schema bump)
7 years ago
8adb3ec472
add some WIP pdo stuff
7 years ago
0b68b1629e
add a sanity check for tt-rss myisam tables
7 years ago
6eeeec4838
Allow <hr> tag in the RSS item' description
7 years ago
9d930af9e1
fetch_file_contents: improve error handling
...
1. if request fails get error string from http response status line
2. do not override http error with possible CURL/php specific last error
3. fix silent php error generated while processing response headers to get last modified value
7 years ago
8b73bd28d8
remove apache-specific x-sendfile stuff
...
implement a hook (HOOK_SEND_LOCAL_FILE) which plugins may use to send files
via httpd-specific implementation to increase performance typically on larger files
7 years ago
701c5a7ee4
get_favicon_url: only check base elements with href attribute
7 years ago
241f69e4db
Handle potentially-relative base element when getting favicon.
...
The base element's "href" attribute is not required to be absolute,
so rewrite relative to the site URL if it is relative.
See:
* https://www.w3.org/TR/html51/document-metadata.html#the-base-element
* https://html.spec.whatwg.org/multipage/semantics.html#the-base-element
7 years ago
153cb6d305
add support for http 304 not modified (no timestamp calculation bullshit like last time)
7 years ago
5e78b0c253
do not base headlines label context submenu on feed tree labels category
7 years ago
e234ac8dcb
$_SERVER['HTTPS'] can be exists and 'off' for non-https connectios
7 years ago
9f7bd151c6
hopefully unify handling of server HTTPS variables where needed, use scheme based on SELF_URL_PATH otherwise
7 years ago
b2d42e960b
replace some usages of SELF_URL_PATH with get_self_url_prefix()
7 years ago
10a1f28f7c
schema: updates for new filter format (bump version to 131)
7 years ago
02f3992a5a
Revert "Revert "filters: support matching on multiple feeds/categories""
...
This reverts commit f5d174bda9
7 years ago
f5d174bda9
Revert "filters: support matching on multiple feeds/categories"
...
This reverts commit 0bf7e007bb
7 years ago
0bf7e007bb
filters: support matching on multiple feeds/categories
...
opml: update filter export/import for new format
7 years ago
6fd0399694
tunables:
...
* add CACHE_MAX_DAYS as a tunable generic expiry interval for various cached files
* add some comments to tunables in functions.php
* rename _MIN_CACHE_FILE_SIZE to MIN_CACHE_FILE_SIZE
* respect MIN_CACHE_FILE_SIZE setting in a few more places where content is cached
8 years ago
5b6ea1ef91
remove pubsubhubbub: dead
8 years ago
c114a2596f
move add_feed_url() to pref_feeds
8 years ago
4fd0790804
fix DAEMON_SLEEP_INTERVAL not being defined when used
...
enforce minimum 60 sec spawn/sleep interval in update processes
8 years ago
65af3b2cbb
move counter stuff to a separate class
8 years ago
7c9b5a3fe4
move label stuff to Labels class
...
fix some unresolved functions
8 years ago
0086a89740
move some label stuff to labels.php
...
move getfeedcategory() to Feeds
8 years ago
904aff7667
abs_to_rel_path: removed
8 years ago
2ed0d6c433
move counter cache to a separate class
...
fix references to get_article_tags
8 years ago
aeb1abedb2
move a bunch of functions into Feeds/Article namespaces
...
+ static function catchupArticlesById($ids, $cmode, $owner_uid = false) {
+ static function getLastArticleId() {
+ static function queryFeedHeadlines($params) {
+ static function getParentCategories($cat, $owner_uid) {
+ static function getChildCategories($cat, $owner_uid) {
move the rest of functions2.php back to functions.php as it is of more manageable size, remove the former
8 years ago
a230bf88a9
move to Article:
...
+ static function purge_orphans($do_output = false) {
move to Feeds
+ static function getGlobalUnread($user_id = false) {
+ static function getCategoryTitle($cat_id) {
+ static function getLabelUnread($label_id, $owner_uid = false) {
8 years ago
86a8351ca2
move the following to Feeds:
...
+ static function catchup_feed($feed, $cat_view, $owner_uid = false, $mode = 'all', $search = false) {
+ static function getFeedArticles($feed, $is_cat = false, $unread_only = false,
+ static function subscribe_to_feed($url, $cat_id = 0,
+ static function getFeedIcon($id) {
+ static function getFeedTitle($id, $cat = false) {
+ static function getCategoryUnread($cat, $owner_uid = false) {
+ static function getCategoryChildrenUnread($cat, $owner_uid = false) {
8 years ago
9549e33c2c
move some common control-generating functions to controls.php
8 years ago
7b55001eee
fix various issues reported by static analysis
...
update gitlab-ci config
8 years ago
337535416f
filter by search results while marking feed as read
8 years ago
1bfe1d7b31
simplify error handling
...
* less convoluted exception dialogs
* use window.onerror for the majority of exception catching/reporting
* remove most of now useless try/catch blocks
* report stacktrace instead of manually specified error locations
8 years ago
dc8bd8a640
add some print_checkbox/print_button calls; rename some plugin preference pane titles
8 years ago
8cf37284e7
af_zz_imgproxy: add optional setting to proxy all remote images
...
functions: add some form helper methods
8 years ago
24c7e4132d
subscribe dialog: do not report errors via alert()
...
fetch_file_contents: reset all globals on start, return error message body when not using curl
subscribe_to_feed: report if cloudflare is in the error message
8 years ago
e934d63e0c
fetch_file_contents: rework the way shim works to prevent intermittent warnings
8 years ago
70c5b2bfcc
feed tree: only run animation for appearing unread counters to prevent clashes with aux counter updating and animations ending up in wrong state
8 years ago
fabfb9fc2a
Added support to fetch_file_contents() to explicitly set CURLOPT_FOLLOWLOCATION.
8 years ago
5ddc3e274d
lib: Upgrade php-publisher from ??? to a5d6a0e (2016-11-15)
...
https://github.com/pubsubhubbub/php-publisher
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
8 years ago
17a8e61d2a
deprecate encrypted feed passwords because mcrypt is getting removed from php 7.1
...
1. transparent decryption for existing installs stays for the time being
2. new passwords are not going to be encrypted even if FEED_CRYPT_KEY is defined
3. added update.php --decrypt-feeds to bulk decrypt existing encrypted passwords
4. updated install to not auto-generate crypt key
5. added warning to config.php-dist
8 years ago
3bba9c396f
fetch_file_contents: set timeout when not using CURL
8 years ago
401eb0f694
Specify feed_id as an int rather than a string.
8 years ago
f1b3b3f330
Add feed_id to subscribeToFeed response when the code is 1 or 0.
...
Set the API_LEVEL to 14.
8 years ago
5cbd1fe8e4
perform housekeeping tasks for plugins loaded in user-context only
8 years ago
e6905f7f87
test if mb_internal_encoding() is available in functions.php head
8 years ago
c71add385d
fetch_file_contents: fix shim when invoked with 1 argument only
9 years ago
465fb16d33
remove fetch_file_contents2, use a compat shim instead
9 years ago
e3bc4591af
add a hash-based fetch_file_contents2()
9 years ago
cc43e19b44
error handler: do not log last query, truncate error message to a smaller length
9 years ago
JustAMacUser