This is a security release for a regression since FreshRSS 1.18.0.
A few highlights
- CVE-2022-23497 Fix security vulnerability in
ext.php
#4928 reported by @c3l3si4n
Detailed tracked changes.
Full changelog:
This is a security release for a regression since FreshRSS 1.18.0.
A few highlights
ext.php
#4928 reported by @c3l3si4nDetailed tracked changes.
Full changelog:
A few highlights
Detailed tracked changes.
Full changelog:
opcache
bug during Web update #4629, update.freshrss.org#4curlopt
options for HTML+XPath #4759template.css
to frss.css
#4644A few highlights
Detailed tracked changes.
Full changelog:
(author:Alice OR intitle:hello) (author:Bob OR intitle:world)
!((author:Alice intitle:hello) OR (author:Bob intitle:world))
search:"My query"
or search:QueryA
, or by ID: S:3
pg_trgm
data/config-user.custom.php
#4360archive.today
#4530rename_attribute()
instead of removing attributes to better be able to style/hide content of articles #4175,status_code
type for PHP 8.1+ simplepie#728"ab cd"
and ab-cd
#4277&
#4287'
in the address #4330htmlspecialchars()
warnings with PHP 8.1+ #4411freshrss_user_maintenance
in CLI #4495errorMessage()
which exists on some platforms #4289entry_before_insert
to change entry->isRead()
#4331php-openssl
(used by PHPMailer) and php-xml
(used by SimplePie) #4420freshrss/freshrss:newest
to PHP 8.2 #4420base_url
to avoid some common configuration bugs, especially via Docker / CLI #4423lib_phpQuery
by PhpGt/CssXPath
library for full content retrieval #4261
a[href*="example"]
CssXPath#181.gitattributes
export-ignore
#4415attributes
(JSON) for entries #4444A few highlights:
Detailed tracked changes.
Full changelog:
:newest
updated to PHP 8.1.1 and Apache 2.4.52 #3666latest
tag to git #4135Detailed tracked changes.
Full changelog:
!pubdate:P3d
) #4092e:1639310674957894
or multiple entry IDs (or): e:1639310674957894,1639310674957893
A few highlights:
Detailed tracked changes.
Full changelog:
L:12,13,14
or label names: label:something
or labels:"my label,my other label,🧪"
L:*
or no label: !L:*
:oldest
is now based on alpine:3.5
with PHP 7.0.33 and Apache 2.4.35 #3666.htaccess
for ./p/themes/
folder #4074CRON_MIN
is set #3927400
and 405
HTTP error codes #3981input
and select
elements for the Origine theme #3727.editorconfig
and .stylelintrc
#3895, #3912??
operator #4020Note: Last release before dropping support for PHP 5 and Internet Explorer 11.
pdo_sqlite
is optional except for export/import SQLite #3545ORIG_PATH_INFO
#3560latest
tag in git for the latest FreshRSS release #3524+
sign #3489docker-compose
#3353
remoteip
to log the client remote IP instead of the local proxy IP #3226LISTEN
to change the internal Apache port when running in host network mode #3343alpine:edge
to test the latest PHP 8+ version #3294alpine:3.4
to test oldest supported PHP 5.6.36 version with Apache 2.4.43 #3274@
-sign in database username (for Azure) #3241ceil()
by intval()
for edge cases with PHP8 #3404js_vars
and nav_menu
#3342phpcs
(PHP_CodeSniffer) line length + whitespace #3488
*.phtml, *.css, *.js
as well.png
files as binary #3211PDO::ERRMODE_SILENT
#3048<time datetime="">
for entry dates #3106quickadd
#3051Quick fix for FreshRSS 1.16.1.
loading="lazy"
for favicons #2962.stick
elements in older Webkit browsers #2995lib_phpQuery
for full-content retrieval #3004FRESHRSS_ENV
environment variable #2963lib_phpQuery
) #2874
#article .title, #article .content
!date:
allowing to exclude any date interval #2869
!date:P1W
(exlude articles newer than 1 week), !pubdate:2019
, -date:2020-01-01/P5d
, etc.newestItemTimestampUsec
#2853HTTP/1.x 200 OK
for an empty request, to ease discovery #2855author:
#2806COPY_LOG_TO_SYSLOG
and FRESHRSS_ENV
controlling logging #2745foreach
in applyFilterActions
#2809lib_phpQuery
when fetching the full content of HTML documents with a complex <head ...>
#2864yield
#2588
<audio>
widgets to use the full width of the reading zone, to help navigation in e.g. podcasts #2875<p>
instead of <pre>
to display <media:description>
information #2807#force_feed
simplepie#643
./extensions/
is solely for third-party extensions #2837
./extensions/
as a Docker volume, to ease adding third-party extensionscheck_url_before_add
and feed_before_actualize
#2704entry_before_display
hook also through the API #2762rel=self
feed redirections when WebSub is disabled #2659SameSite=Lax
#2630data/config-user.custom.php
#2490
mod_authz_core
instead of mod_access_compat
when running on Apache 2.4+ #2461COPY_LOG_TO_SYSLOG
to see all logs at once in e.g. docker logs -f
#2591FRESHRSS_ENV
to control Minz development mode #2508themes/xTheme-*
#2511php-gmp
for API support in Ubuntu 32-bit #2450hadolint
automatic check of Docker files in Travis #2456@-
as valid characters in usernames (i.e. allow most e-mails) #2391