91285e3868
router: add additional logging for refused requests; reject requests for methods starting with _
3 years ago
8e79f1717d
prefs: unify naming
3 years ago
020f062a76
feeds: unify naming
3 years ago
6b006a18e7
subscribe to feed: use client dialog
3 years ago
a2e688fcb2
render headline-specific toolbar on the client
3 years ago
4996d8ccfe
pref-users edit: use client dialog
3 years ago
0b7377238a
add Handler_Administrative
3 years ago
33ea46c2bc
pref-users/add: remove unused variable
3 years ago
0fbf109912
* remove users/filters toolbar edit button (just click on it)
...
* fix title of edit filter dialog always showing create filter
3 years ago
a8cc43a0ff
move logout_user() to UserHelper
3 years ago
2547ece0ca
pref-users: cleanup index
3 years ago
1c7e4782aa
prefs system: load phpinfo using inline method
3 years ago
6b5c9c781b
pref prefs: load secondary tabs when needed
3 years ago
e5cedc7d5f
appPasswordList: markup cleanup
3 years ago
8e75551f95
pref prefs: split index into manageable chunks
3 years ago
15fd23c374
use shortcut echo syntax for php templates
3 years ago
d4c925819b
pref-feeds: load error button via xhr
3 years ago
43d8a1f2ff
remove getinactivefeeds (duplicate functionality)
3 years ago
103d30ad3f
batch subscribe: use client dialog
3 years ago
c36b2adf84
feeds with errors: use client dialog
3 years ago
8464c619e4
inactive feeds: use client dialog
3 years ago
17413078a7
pref feeds: index cleanup, split into several methods, use tabs to maximize space for feed tree, persist feed tree state
3 years ago
9684ce5c4b
minor fixes re: previous
3 years ago
b112198991
pref filters index: markup cleanup
3 years ago
5127c29297
prefs system: markup cleanup
3 years ago
aa63014073
pref-labels index: use cleaner markup
3 years ago
46f6d7c11a
pref-labels/index: cleanup
3 years ago
e7924c6dac
label editor: use client dialog
3 years ago
481bd76100
pref helpers: move some methods to their own sections
3 years ago
6af83e3881
drop ENABLE_GZIP_OUTPUT; system prefs: load php info only if needed
3 years ago
157675d9fd
prefs: fix published shared URL dialog
3 years ago
03b85248e6
move some dialogs to xhr loading
3 years ago
3268364693
more dialog-related cleanup
3 years ago
3d11c61f32
* OPML import: don't reload everything, just feed tree
...
* dialogs: use auto-destroying dialog for almost all dialogs instead of destroying them manually
* some general dialog-related cleanup
3 years ago
8f8675a26a
* filters: remove duplicate code, overall cleanup
...
* check if some tres exist before trying to reload them
3 years ago
0f7af07c6e
edit filter dialog: cleanup
3 years ago
20fb056323
remove customizecss from csrf-ignored methods
3 years ago
bf6d0f2817
various dialog-related fixes; stop referring to many dialogs by name; move filter test initial dialog to client side
3 years ago
72e38bfe1f
rework a few more dialogs to use App.dialogOf()
3 years ago
d466284fab
* customizeCSS: client dialog
...
* remove hardcoded width from most dialogs (move to css)
* add helper to easily get dialog from its widget
* rework some dialog buttons to use current object instead of calling dialog by name
3 years ago
83b0738b04
opml import: no more iframe, use client dialog
3 years ago
3134d71b8f
fix typo introduced by 4182018cb7
3 years ago
4182018cb7
generated feed: use client dialog
3 years ago
1a680d4eae
publishedOPML: use client dialog
3 years ago
09e9f34bb4
add UserHelper::find_user_by_login() and rewrite some user checks to invoke it instead of going through PDO
3 years ago
7af8744c85
authentication: make logins case-insensitive (force lowercase)
3 years ago
e7e73193fe
fix warning in profile edit dialog (2)
3 years ago
2505ae43a9
fix warning in profile edit dialog
3 years ago
9e1459d5db
pref/prefs: fix warning when in non-default profile
3 years ago
d630a92c40
fix 2 warnings in feed editor
3 years ago
345dbb3521
rewrite some more hooks
3 years ago
fc2e0bf67b
log viewer: disable previous page on page 1
3 years ago
3b52cea811
move some old-style handlers to new callback ones
3 years ago
1d5c8ee500
prefs: fix user plugins shown by incorrect criteria
3 years ago
1eb1629d9e
pluginhost: rework run_hooks() to be shorter, add callback variant; implement exception handling for both
3 years ago
d293cbd5a9
fix several warnings related to feed editor
3 years ago
ce2335deaf
pref-users: css fixes
3 years ago
d8de10d78a
error log: fix severity dropdown
3 years ago
73e697a0df
fix some warnings in prefs (filters, users)
3 years ago
73070544ca
error log: make it more readable
3 years ago
5cfc5914f2
log viewer: show total pages
3 years ago
10392ecc28
event log: add pagination
3 years ago
a544123b59
fix clean() for arrays and user plugin list
3 years ago
6e774a58fe
more php8 fixes mostly related to login
3 years ago
403dca154c
initial WIP for php8; bump php version requirement to 7.0
3 years ago
da0ad82c24
Archive cleanup:
...
- remove code to manually archive/unarchive articles
- remove ttrss_archived_feeds/orig_feed_id handling - the whole thing was implemented for
this data to be kept indefinitely; it doesn't make a lot of sense to deal with this stuff
now that it is expired after one month anyway (same reasons as feed browser being removed - privacy)
- remove "originally from"-related stuff because of the above
- also remove unused remaining frontend/backend code related to feed browser (rip)
4 years ago
40f38fc87f
pluginhost: load plugin data automatically (also marks load_data method as private)
4 years ago
33a5ecd2ce
feed editor: show purge interval correctly if FORCE_ARTICLE_PURGE is set
4 years ago
8cc07bc8bd
event log: add severity filtering
4 years ago
6da576dbe4
BLACKLISTED_TAGS: use textarea for editing; normalize value when saving
4 years ago
d2db58de4f
Switch from 'vsprintf' to 'sprintf' in another place.
4 years ago
ef7e679363
Merge branch 'feature/php8' of wn/tt-rss into master
4 years ago
9b7338e807
feed editor: properly show global purging interval as disabled
4 years ago
62da307ef1
Use correct 'sprintf' function and other minor fixes in Pref_Feeds.
4 years ago
a1f8d6941b
Remove duplicate block in 'classes/pref/filters.php'.
...
Also a minor tweak to getting the search filter.
4 years ago
8c4ca7c8ef
Fix some 'isset' checks in 'classes/pref/prefs.php'.
4 years ago
8089fcc762
feed editor: also show default value for purge interval
4 years ago
d48460969d
feed editor: show actual value of default update interval
4 years ago
d1ee30d1ba
prevent horizontal scrolling in filter editor dialog if rules are very long
4 years ago
215f388992
move timestamp-related stuff to a separate class
4 years ago
6811d0bde2
use self:: in some places to invoke static methods from the same class
4 years ago
74568df4ff
remove a lot of stuff from global context (functions.php), add a few helper classes instead
4 years ago
03a337a660
add basic safe mode which doesn't load any user plugins
4 years ago
a4525d31b2
replace FALSE with false so that static analyzer shuts up about it
4 years ago
89d53a7f49
fix typo in previous
4 years ago
1f79d614c4
fix OTP QR code not displayed because of CSRF token passed as a query
...
parameter
use type-strict comparison when validating CSRF token on the backend
4 years ago
33fdde249e
pass CSRF token to opml import and feed icon replace dialogs
4 years ago
4a074111b5
user preferences: forbid < and > characters when changing passwords (were silently stripped on save because of clean())
4 years ago
c3d14e1fa5
- fix multiple vulnerabilities in af_proxy_http
...
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized
- fetch_file_contents: validate all URLs before requesting them
- validate URLs: explicitly whitelist http and https scheme, forbid everything else
- DiskCache/cached_url: only serve whitelisted content types (images, video)
- simplify filename/URL handling code, remove and consolidate some less-used functions
4 years ago
fa653f5a43
prefs: show disabled filters properly on mysql
4 years ago
2996a3942f
prefs: show root of filter tree as enabled so it's not grayed out
4 years ago
d01ad09800
eslint-related fixes; move a few things from global context to App
4 years ago
c8cc845d5b
when removing favicon, reset its auto-refresh timer
4 years ago
1f2a721905
allow overriding built-in templates via templates.local
4 years ago
bcbc5ccc78
batchSubscribe: use validationtextarea
4 years ago
f24ece85a6
add validationtextarea control, use it for filter match editor
4 years ago
8645f36c5b
filter test dialog: pass contents via xhr POST
4 years ago
4ab3854aed
don't generate default.css, replace with themes/light.css as a default root CSS file
4 years ago
60288f02e8
1. feedtree: show counters for marked articles if view-mode == marked
...
2. hide/show relevant counter nodes using css
3. cleanup some counter-related code
4. compile default css into light theme to prevent cache-related issues
4 years ago
5b6d9cee29
prefs layout fixes:
...
1. prevent layout breakage when using an authenticator which doesn't allow changing passwords
2. show explanatory messages when OTP or password changing is not available
3. allow app (API) passwords when using any auth module
4 years ago
Andrew Dolgov