Inverle
|
9dd30f03ec
Improve restriction of curl params (#8009)
|
6 months ago |
Inverle
|
067479a9f1
Lazy-load `<track src>` (#7997)
|
6 months ago |
Alexandre Alapetite
|
92a73a2c4f
Minor forgotten str_starts_with (#7991)
|
6 months ago |
Alexandre Alapetite
|
bc3e4c8fa4
Add option for CSP frame-ancestors (#7857)
|
6 months ago |
Inverle
|
055342118f
Restrict allowed curl parameters (#7979)
|
6 months ago |
Alexis Degrugillier
|
23ba48c71f
Change how files are included (#7916)
|
7 months ago |
Inverle
|
43248b461d
Fix curl response parsing (#7866)
|
7 months ago |
Alexandre Alapetite
|
ade9ba8817
Call cleanCache when refreshing feeds (#7827)
|
7 months ago |
Alexandre Alapetite
|
ddb9e91bf2
Fix some PHP 8.5 deprecations (#7826)
|
7 months ago |
Alexandre Alapetite
|
62f32ccadf
PHPStan: finalise strictArrayFilter (#7794)
|
7 months ago |
Alexandre Alapetite
|
e915ebe46e
Rework fetch favicons (#7767)
|
8 months ago |
Inverle
|
c952256564
Strip more unsafe attributes e.g. `referrerpolicy` (#7770)
|
8 months ago |
Alexandre Alapetite
|
7a0c423357
Implement support for HTTP 429 Too Many Requests (#7760)
|
8 months ago |
Sam Edwards
|
5bbd299c7e
Call DOMNode::insertBefore() on the parent of it's $child (#7741)
|
8 months ago |
Inverle
|
7d9fc0ce0c
Fix multiple auth headers bug (#7703)
|
9 months ago |
Inverle
|
18b5c8ec6d
Handle redirects when scraping feed from HTML (#7654)
|
9 months ago |
Inverle
|
a6948218fb
frame-ancestors CSP (#7677)
|
9 months ago |
Inverle
|
dd5ea7ab4e
Include remaining tags/attributes for lazy loading (#7636)
|
10 months ago |
Alexandre Alapetite
|
5f45df3168
Strip more styles attributes (#7606)
|
10 months ago |
Alexandre Alapetite
|
532d229d33
Fix newest articles not shown (#7577)
|
10 months ago |
Alexandre Alapetite
|
3f187395ea
Move PHP minimum version check (#7560)
|
11 months ago |
Inverle
|
4568111c00
Fix file serving for symlinked extensions (#7545)
|
11 months ago |
Alexandre Alapetite
|
6bb8680ae0
HTTP Auth disallow multiple headers (#7528)
|
11 months ago |
Alexandre Alapetite
|
f58dea6a5a
SimplePie forbit formaction attribute (#7506)
|
11 months ago |
Alexandre Alapetite
|
d3d9acca9f
Web scraping forbid security headers in cURL (#7496)
|
1 year ago |
Alexandre Alapetite
|
54e2f9107d
Disallow iframe srcdoc for now (#7494)
|
1 year ago |
maTh
|
1f624bc5e2
Referrer-Policy: same-origin (#6303)
|
1 year ago |
Alexandre Alapetite
|
d7ca2f8768
Doc force-https (#7259)
|
1 year ago |
Alexandre Alapetite
|
22b74b0a57
Improve cURL proxy options (#7231)
|
1 year ago |
Alexandre Alapetite
|
50adb55982
Add some missing PHP native types (#7191)
|
1 year ago |