You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andrew Dolgov c3d14e1fa5 - fix multiple vulnerabilities in af_proxy_http ... - fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions		4 years ago
..
auth	add placeholder authentication via app passwords if service is passed	5 years ago
db	db_prefs: return null if requested key is unset	6 years ago
feeditem	tag-related fixes	5 years ago
handler	- fix multiple vulnerabilities in af_proxy_http	4 years ago
logger	SQL logger: log some parameters	5 years ago
pref	- fix multiple vulnerabilities in af_proxy_http	4 years ago
api.php	move order_by to SQL override logic into a separate function	4 years ago
article.php	eslint-related fixes; move a few things from global context to App	5 years ago
backend.php	- fix multiple vulnerabilities in af_proxy_http	4 years ago
counters.php	properly return counters for labels with zero assigned articles	4 years ago
db.php	Logger_SQL: use separate PDO connection	6 years ago
dbupdater.php	further update CLI schema updater layout to make it more readable	6 years ago
debug.php	CLI tools: fix --quiet not working if --log is unset	6 years ago
digest.php	allow overriding built-in templates via templates.local	5 years ago
diskcache.php	- fix multiple vulnerabilities in af_proxy_http	4 years ago
dlg.php	mark primary button in the default password dialog	5 years ago
feedenclosure.php	remove some redundant php closing tags	8 years ago
feeditem.php	Store language of entries as indicated by the feed.	6 years ago
feedparser.php	parser: force libxml error messages to valid utf8	6 years ago
feeds.php	- fix multiple vulnerabilities in af_proxy_http	4 years ago
handler.php	pluginhost: do not connect via legacy DB api until requested	7 years ago
iauthmodule.php	add placeholder authentication via app passwords if service is passed	5 years ago
idb.php	remove some redundant php closing tags	8 years ago
ihandler.php	remove some redundant php closing tags	8 years ago
labels.php	search: add support for label:XXX search keyword	5 years ago
logger.php	Logger->log() allow passing context (defaults to '')	6 years ago
mailer.php	Fix to_address being logged twice	6 years ago
opml.php	OPML: export/import per-feed purge interval	4 years ago
plugin.php	pluginhost: remove plugin gettext helpers (moved to plugin base class)	6 years ago
pluginhandler.php	af_readability: add missing file	5 years ago
pluginhost.php	- fix multiple vulnerabilities in af_proxy_http	4 years ago
rpc.php	- fix multiple vulnerabilities in af_proxy_http	4 years ago
rssutils.php	core: pass found enclosures to HOOK_ARTICLE_FILTER	4 years ago
templator.php	allow overriding built-in templates via templates.local	5 years ago