c3d14e1fa5
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions |
4 years ago | |
|---|---|---|
| api | ||
| cache | ||
| classes | 4 years ago | |
| feed-icons | ||
| images | 6 years ago | |
| include | 4 years ago | |
| install | 5 years ago | |
| js | 4 years ago | |
| lib | 5 years ago | |
| locale | 4 years ago | |
| lock | ||
| plugins | 4 years ago | |
| plugins.local | ||
| schema | ||
| templates | 5 years ago | |
| templates.local | 5 years ago | |
| themes | 5 years ago | |
| themes.local | ||
| utils | ||
| vendor | ||
| .editorconfig | ||
| .eslintrc.js | 5 years ago | |
| .gitignore | ||
| CONTRIBUTING.md | ||
| COPYING | ||
| README.md | ||
| backend.php | ||
| config.php-dist | 5 years ago | |
| errors.php | ||
| index.php | 4 years ago | |
| jsconfig.json | 5 years ago | |
| messages.pot | 5 years ago | |
| opml.php | ||
| prefs.php | 5 years ago | |
| public.php | ||
| register.php | 5 years ago | |
| update.php | 5 years ago | |
| update_daemon2.php | ||
README.md
Tiny Tiny RSS
Web-based news feed aggregator, designed to allow you to read news from any location, while feeling as close to a real desktop application as possible.
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.
Copyright (c) 2005 Andrew Dolgov (unless explicitly stated otherwise).
Uses Silk icons by Mark James: http://www.famfamfam.com/lab/icons/silk/