История коммитов

Автор SHA1 Сообщение Дата
  Inverle 01afc061d7 Slightly more robust SessionTest and cleanup (#9376) 22 часов назад
  Alexandre Alapetite e247edb1fb Fixes for PHPStan 2.2.16 (#9368) 1 день назад
  Inverle 0285dc8970 Check SVG optimization in the tests CI workflow with SVGO (#9361) 2 дней назад
  Antonio Santos 84023d443e Update Antonio Santos website in credits (#9367) 2 дней назад
  Alexandre Alapetite a8e5e6300b Better enforce feed limits (#9357) 3 дней назад
  Gigi 5a270c02b0 Rotate session ID on all authenticated transitions (CWE-384) (#9333) 3 дней назад
  Yuchen Shi 818b57a9a9 Update documentation of TRUSTED_PROXY syntax and document limitations. (#9283) 3 дней назад
  Gigi cd42dc7509 Bound ZIP import against decompression bombs (CWE-409) (#9332) 3 дней назад
  Gigi d5ad610c3d Make the login challenge nonce one-time (CWE-294) (#9334) 4 дней назад
  Gigi a6253486c0 Require POST+CSRF for self-update mutations; guard post-config step (CWE-352) (#9335) 5 дней назад
  Inverle 6153087f68 Fix regression with HTTPS proxies due to wrong TLS SNI resolution (#9341) 5 дней назад
  Ethan Stoner 5fb62464e9 Call check_url_before_add hook when previewing a feed (#9343) 5 дней назад
  qwist1233-cpu 03d5797d9f i18n(tr): translate remaining Turkish TODO strings (#9349) 5 дней назад
  colons b0ccfe8b24 Don't disable anonymous refresh when anonymous feed access is disabled. (#9354) 5 дней назад
  Pavel Miniutka fcc41b6ea0 Add Belarusian (be) translation (#9351) 5 дней назад
  Zain Qureshi 0a5c0ca148 docs: fix dead section anchors in English First steps guide (#9348) 6 дней назад
  Alexandre Alapetite 64f7f24c6e Improve WebSub security (#9330) 1 неделя назад
  Alexandre Alapetite e7f2f97d72 Fix CI warnings reported by zizmor (#9331) 1 неделя назад
  Gigi 27288e125d docs: add Luigi Colluto to CREDITS (#9338) 1 неделя назад
  Gigi 6780afe846 Reject token access (RSS/OPML export, feed refresh) for disabled accounts (CWE-613) (#9336) 1 неделя назад
  Alexandre Alapetite 8067fd994b Use PHP SensitiveParameter (#9322) 1 неделя назад
  dependabot[bot] babb85ccb8 chore(deps-dev): bump stylelint (#9328) 1 неделя назад
  dependabot[bot] 691616a6d0 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.4 (#9325) 1 неделя назад
  dependabot[bot] dc3d7677c2 chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#9326) 1 неделя назад
  dependabot[bot] 6c330da06f chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#9324) 1 неделя назад
  dependabot[bot] 09c9b8b5b9 chore(deps-dev): bump the eslint group with 2 updates (#9327) 1 неделя назад
  dependabot[bot] b0b7333cc2 chore(deps-dev): bump phpstan/phpstan from 2.2.9 to 2.2.13 (#9323) 1 неделя назад
  Inverle 6625137a8e Add zizmor workflow for action security checks (#9228) 1 неделя назад
  Alexandre Alapetite ad4723cb1f Warn during session regenerate fail (#9311) 1 неделя назад
  Justin Tracey 3f12dcf2f6 Add optional feed argument to actualize-user.php (#9319) 1 неделя назад