454292b295
format_article_enclosures: allow embedding .jpeg files
7 years ago
676c7303ca
add HOOK_ENCLOSURE_ENTRY for af_zz_imgproxy (2)
7 years ago
58210301e0
add HOOK_ENCLOSURE_ENTRY for af_zz_imgproxy
7 years ago
ba2853caac
Prevent target='_blank' vulnerability on dynamic link
7 years ago
fafd32e2dc
use get_self_url_prefix() when rewriting cached images
7 years ago
7818bfde0b
sanitize: properly handle cached content in archived articles
7 years ago
70c0a8c2e0
pass several image files used in notify messages to frontend as base64 to prevent broken error messages in case network connection is down. also, update some close buttons to show correct cursor.
7 years ago
829d478f1b
add some protection against opener attacks if external site is opened via window.open()
7 years ago
5edd605ae1
image cache: do not try to cache data: schema urls; add caching of html5 video content (similar to cache_starred_images plugin)
8 years ago
0442cbb6c1
image cache: send files as content-disposition: attachment; add .png suffix to image urls
8 years ago
181c8285dd
add compact theme with smaller font
8 years ago
e432b8fbe2
implement cache-busting for default theme.css
...
night theme: small fixes
8 years ago
553ec3c351
pass article guid to hook_render_article
8 years ago
311cdb27f4
sanitize: allow dfn tag
...
Add <dfn> tag to allowed tags list. <dfn> represents the defining
instance of a term in HTML.
8 years ago
3b001e4330
support rel=noopener for links
8 years ago
67268b0017
sanitize: allow acronym tag
8 years ago
967f0619c7
force ngettext() count argument type to string
8 years ago
c606bd5741
tweak the enclosure dropdown display a little bit for less-readable urls
8 years ago
62958fe9dc
convert to punycode for feed on idn hostname
8 years ago
6687cb9927
shared posts: remove link to feed in externally shared articles to prevent leaking potentially private feed urls
8 years ago
1a322ff3df
import_export: better error message if upload failed
8 years ago
d8b0f06705
Remove href attribute if it executes JavaScript.
8 years ago
64c24ecb59
add hotkey for toggling VFEED_GROUP_BY_FEED preference
8 years ago
42f78188d0
sanitize: force strip unnecessary data outside of <body>...</body> tags generated by DOMDocument::saveHTML()
8 years ago
465fb16d33
remove fetch_file_contents2, use a compat shim instead
8 years ago
633fb7ffe2
amend previous
8 years ago
79c891a8b7
set smallish timeout on update check, exclude update checking on initial load
8 years ago
7c0d68f207
remove dismiss* functions
8 years ago
94d425fe4a
rewrite_relative_url: only skip urls like magnet: instead of everything with :
8 years ago
7bbe94bc93
Revert "rewrite_relative_url: do not skip urls containing :"
...
This reverts commit a547fef6ab
8 years ago
a547fef6ab
rewrite_relative_url: do not skip urls containing :
8 years ago
a01bfd78c2
Remove srcset and sizes attributes from img tag if locally caching images.
8 years ago
50bda3fefb
sanitize: allow <xml:namespace> (thanks, livejournal)
9 years ago
71b75bb7fa
fix multiple issues with archived feeds
9 years ago
3b44aae0f3
sanitize: allow <description>
9 years ago
c352248651
get_article_tags: while getting tags from cache check if article entry actually exists
9 years ago
85d067e837
tag_is_valid: check numeric tags properly
9 years ago
a536f94c8d
sanitize: clear out @srcset/@sizes on images leading to http sites when running over https
9 years ago
19e47ad60b
queryFeedHeadlines: don't check first_id when sorting by oldest first
9 years ago
4c46702672
drop support for (obsolete, removed from recent php versions) php safe_mode setting
...
remove ugly hacks for curl + open_basedir combination breaking support for http redirects
9 years ago
389ae94a40
iframe_whitelisted: allow player.vimeo.com
9 years ago
9cc29abd41
queryFeedHeadlines: int_id was not included when browsing by tag which broke several button plugins
9 years ago
94b8ce6cec
queryfeedheadlines: remove disable_offsets hack
9 years ago
6b860bd9d2
recently read: limit query by last_read
9 years ago
08e79cb6b9
Fixed height/width image attributes for enclosures.
9 years ago
961cae85a4
Merge branch 'master' of git.fakecake.org:tt-rss
9 years ago
d5eaaa0508
curl: let's verify ssl peers
9 years ago
8493163576
Unset $retval after HOOK_FORMAT_ENCLOSURES.
...
Fixes an edge case where changing the array of enclosures with HOOK_FORMAT_ENCLOSURES might break the dropdown rendering if HOOK_RENDER_ENCLOSURE has no registered hooks.
9 years ago
28539f6aaf
search_to_sql: trim() input
9 years ago
dcbe36b2a2
fix some remaining old-style viewfeed() calls
9 years ago
Andrew Dolgov