 Alexandre Alapetite
|
a8e5e6300b
Better enforce feed limits (#9357)
|
vor 4 Stunden |
 Gigi
|
5a270c02b0
Rotate session ID on all authenticated transitions (CWE-384) (#9333)
|
vor 4 Stunden |
 Yuchen Shi
|
818b57a9a9
Update documentation of TRUSTED_PROXY syntax and document limitations. (#9283)
|
vor 6 Stunden |
|
Gigi
|
cd42dc7509
Bound ZIP import against decompression bombs (CWE-409) (#9332)
|
vor 17 Stunden |
|
Gigi
|
d5ad610c3d
Make the login challenge nonce one-time (CWE-294) (#9334)
|
vor 1 Tag |
|
Gigi
|
a6253486c0
Require POST+CSRF for self-update mutations; guard post-config step (CWE-352) (#9335)
|
vor 1 Tag |
 Inverle
|
6153087f68
Fix regression with HTTPS proxies due to wrong TLS SNI resolution (#9341)
|
vor 1 Tag |
 Ethan Stoner
|
5fb62464e9
Call check_url_before_add hook when previewing a feed (#9343)
|
vor 1 Tag |
 qwist1233-cpu
|
03d5797d9f
i18n(tr): translate remaining Turkish TODO strings (#9349)
|
vor 2 Tagen |
 colons
|
b0ccfe8b24
Don't disable anonymous refresh when anonymous feed access is disabled. (#9354)
|
vor 2 Tagen |
 Pavel Miniutka
|
fcc41b6ea0
Add Belarusian (be) translation (#9351)
|
vor 2 Tagen |
 Zain Qureshi
|
0a5c0ca148
docs: fix dead section anchors in English First steps guide (#9348)
|
vor 3 Tagen |
|
Alexandre Alapetite
|
64f7f24c6e
Improve WebSub security (#9330)
|
vor 1 Woche |
|
Alexandre Alapetite
|
e7f2f97d72
Fix CI warnings reported by zizmor (#9331)
|
vor 1 Woche |
|
Gigi
|
27288e125d
docs: add Luigi Colluto to CREDITS (#9338)
|
vor 1 Woche |
|
Gigi
|
6780afe846
Reject token access (RSS/OPML export, feed refresh) for disabled accounts (CWE-613) (#9336)
|
vor 1 Woche |
|
Alexandre Alapetite
|
8067fd994b
Use PHP SensitiveParameter (#9322)
|
vor 1 Woche |
 dependabot[bot]
|
babb85ccb8
chore(deps-dev): bump stylelint (#9328)
|
vor 1 Woche |
|
dependabot[bot]
|
691616a6d0
chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.4 (#9325)
|
vor 1 Woche |
|
dependabot[bot]
|
dc3d7677c2
chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#9326)
|
vor 1 Woche |
|
dependabot[bot]
|
6c330da06f
chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#9324)
|
vor 1 Woche |
|
dependabot[bot]
|
09c9b8b5b9
chore(deps-dev): bump the eslint group with 2 updates (#9327)
|
vor 1 Woche |
|
dependabot[bot]
|
b0b7333cc2
chore(deps-dev): bump phpstan/phpstan from 2.2.9 to 2.2.13 (#9323)
|
vor 1 Woche |
|
Inverle
|
6625137a8e
Add zizmor workflow for action security checks (#9228)
|
vor 1 Woche |
|
Alexandre Alapetite
|
ad4723cb1f
Warn during session regenerate fail (#9311)
|
vor 1 Woche |
 Justin Tracey
|
3f12dcf2f6
Add optional feed argument to actualize-user.php (#9319)
|
vor 1 Woche |
|
Alexandre Alapetite
|
74092a7fda
Fix regression sharing links (#9303)
|
vor 1 Woche |
 Jamal Kamaladdinoglu
|
2bb901d9c4
Accept a trusted proxy address given without a subnet (#9301)
|
vor 2 Wochen |
 András Marczinkó
|
64ce16db86
Added the missing semicolons to the grid-area manage-labels and the manage-share (#9298)
|
vor 2 Wochen |
 Morax
|
cc45db5ef8
Fix adaptive reading state after marking articles read (#9290)
|
vor 2 Wochen |
