Frédéric Guillot
880b75473d
feat(settings): replace div.panel with paragraph tags for OAuth2 links
2025-05-11 17:57:56 -07:00
Frédéric Guillot
5ae2cbd943
feat(settings): add validation for entry order and categories sorting order
2025-05-11 17:52:59 -07:00
Frédéric Guillot
828a4334db
fix(sanitizer): MathML tags are not fully supported by golang.org/x/net/html
...
See https://github.com/golang/net/blob/master/html/atom/gen.go
and https://github.com/golang/net/blob/master/html/atom/table.go
2025-05-06 21:18:19 -07:00
jvoisin
d1dc369bb2
feat(sanitizer): add MathML tags to the sanitizer
...
This was found by reading the article pointed by https://lobste.rs/s/nobvmp/how_prime_factorizations_govern_collatz
2025-05-06 20:19:56 -07:00
jvoisin
ff2dfe977b
feat: remove the ref parameter from url
...
This is used by (at least) Ghost (https://forum.ghost.org/t/ref-parameter-being-added-to-links/38335 )
Examples:
- https://blog.exploits.club/exploits-club-weekly-newsletter-66-mitigations-galore-dirtycow-revisited-program-analysis-for-uafs-and-more/
- https://labs.watchtowr.com/is-the-sofistication-in-the-room-with-us-x-forwarded-for-and-ivanti-connect-secure-cve-2025-22457/
2025-05-06 19:59:55 -07:00
Frédéric Guillot
3de9629a49
feat(googlereader): avoid SQL query to fetch username in streamItemContentsHandler
2025-05-04 20:38:53 -07:00
Frédéric Guillot
8d821dfc3b
fix(googlereader): handle various item ID formats
...
- Expected format: "tag:google.com,2005:reader/item/00000000148b9369" (hexadecimal string with prefix and padding)
- NetNewsWire uses this format: "tag:google.com,2005:reader/item/2f2" (hexadecimal string with prefix and no padding)
- Reeder uses this format: "000000000000048c" (hexadecimal string without prefix and padding)
- Liferea uses this format: "12345" (decimal string)
2025-05-04 20:11:37 -07:00
Frédéric Guillot
cb775bc79e
refactor(googlereader): move constants to separate files
2025-05-04 13:02:54 -07:00
Frédéric Guillot
6cc8d8abf1
fix(googlereader): /items/contents should accept short form item IDs
2025-05-03 21:48:41 -07:00
Frédéric Guillot
50395f13ca
feat(googlereader): add mark-all-as-read endpoint
2025-05-03 18:38:54 -07:00
Frédéric Guillot
e8c3435bb9
fix(googlereader): return a 400 instead of 500 for invalid edit requests
2025-05-02 18:15:00 -07:00
Frédéric Guillot
9a8a8bdca3
refactor(googlreader): remove redundant log message
2025-05-02 17:56:21 -07:00
Frédéric Guillot
63f0a17388
fix(googlereader): avoid panic for inexisting feed or category
2025-05-02 17:42:25 -07:00
NoelNegash
81c7669945
feat(sanitized): allow Spotify iframes
2025-05-02 16:25:17 -07:00
Frédéric Guillot
d33e305af9
fix(api): hide_globally categories field should be a boolean
2025-04-21 19:43:25 -07:00
Frédéric Guillot
764212f37c
refactor(js): replace DomHelper methods with standalone functions
2025-04-17 18:15:08 -07:00
Tali Auster
e02b65d4bc
fix: deal with navigator.share exceptions
...
Navigator.share returns a promise that's executed in the background, but
unless we await it explicitly, we won't get the exceptions in the
try/catch block.
2025-04-17 17:07:38 -07:00
Tali Auster
fe7ec25a09
chore: fix indentation
2025-04-17 17:07:38 -07:00
Tali Auster
2959a4d2bf
fix: clarify share flow in UI
...
Prior to this commit, to share an entry, a user has to click on the
share link and then copy the URL they are redirected to. The danger is
that they may right-click and copy the share link without actually
clicking on it, and therefore share a link that, when authenticated,
shares the entry, rather than actually sharing the entry.
Here, we avoid this misinterpretation by making sharing into a POST
request and using a form rather than a link.
2025-04-17 17:07:38 -07:00
AiraNadih
6b70a7dc81
feat(api): add update_content query parameter to /entries/{entryID}/fetch-content endpoint
2025-04-17 12:41:58 -07:00
Frédéric Guillot
d139d8a6ce
feat(cli): add -reset-feed-next-check-at argument
2025-04-11 15:56:57 -07:00
Frédéric Guillot
c87c93d85f
feat(config): add SCHEDULER_ROUND_ROBIN_MAX_INTERVAL option
...
Add option to cap maximum refresh interval when RSS TTL, Retry-After, Cache-Control, or Expires headers specify excessively high values.
2025-04-11 15:40:32 -07:00
Matthaiks
c4e92e6111
feat(locale): update Polish translation
2025-04-07 12:06:44 -07:00
Frédéric Guillot
ef22e95f8b
feat: implement proxy URL per feed
2025-04-06 21:05:19 -07:00
tssujt
7b344de846
feat(telegrambot): replace "Go to website" button with "Go to Miniflux"
2025-04-06 18:30:42 -07:00
Frédéric Guillot
c45b51d1f8
feat: use Cache-Control max-age and Expires headers to calculate next check
2025-04-06 16:24:00 -07:00
Frédéric Guillot
0af1a6e121
refactor: avoid logging twice the feed errors in the background worker
2025-04-06 15:39:40 -07:00
Frédéric Guillot
535fd050b7
feat: add proxy rotation functionality
2025-04-06 14:59:00 -07:00
Qeynos
7514e8a0c1
feat(locale): update Chinese translation
2025-04-04 19:40:44 -07:00
Cthulhux
ca3ede3183
Update de_DE.json
...
More translations
2025-04-04 19:37:53 -07:00
Frédéric Guillot
cb695e653a
fix(security): use a more restrictive CSP for untrusted content
2025-03-29 19:49:41 -07:00
Matthaiks
f57949c9a2
feat(locale): update Polish translation
2025-03-29 15:15:21 -07:00
Frédéric Guillot
94fb3d6159
fix: change labels from Read / Unread to "Mark as Read"
2025-03-28 17:34:44 -07:00
Frédéric Guillot
51560f191f
fix(subscription): add /rss/feed.xml to the list of known feed URLs
2025-03-28 16:59:06 -07:00
Frédéric Guillot
c0fcdf3b6e
fix(ui): update entry tags display logic to show links based on user authentication
2025-03-28 15:53:08 -07:00
Frédéric Guillot
969efd2af7
fix(ui): update share feature to correctly select title element and handle empty title
2025-03-28 15:36:43 -07:00
Frédéric Guillot
87fccfee3a
fix(ui): remove touch-action style because it could cause horizontal scrolling issue
2025-03-28 15:20:31 -07:00
Frédéric Guillot
e643effefa
feat: combine feed icon handlers to use only externalIconID
2025-03-28 14:29:19 -07:00
Frédéric Guillot
c531be8780
fix: update Content-Security-Policy to use 'sandbox' directive
2025-03-28 13:06:59 -07:00
Frédéric Guillot
6e3cecc57e
feat(locale): add Romanian translation
...
This contribution was sent outside GitHub. Credit to Laurentiu.
2025-03-28 11:11:20 -07:00
Tali Auster
b3d385861f
fix: log warning on an empty client secret
...
Because Miniflux runs as a confidential service, a missing client secret
is a mistake in configuration. An empty client secret appears to be
valid per RFC 6749 (and is in fact the default set by Miniflux!), so we
log a warning.
2025-03-27 20:00:09 -07:00
Frédéric Guillot
78ff727064
fix: name "external_id": converting NULL to string is unsupported
...
Regresion introduced by commit df8bc742fb
2025-03-26 20:51:57 -07:00
Josiah Campbell
df8bc742fb
feat(googlereader): add feed icon field, endpoint
...
Adds an endpoint to the Google Reader integration to serve
feed icon URLs.
2025-03-25 20:55:16 -07:00
Frédéric Guillot
e342a4f143
fix: address minor issues detected by Go linters
2025-03-24 20:48:46 -07:00
Frédéric Guillot
82a6fe64ae
feat(storage): reduce the number of SQL queries when fetching entry enclosures
2025-03-23 14:13:33 -07:00
Matthaiks
05f7a34d43
feat(locale): update Polish translation
2025-03-07 11:36:25 -08:00
Frédéric Guillot
315e72c412
fix(rewrite): remove obsolete rule for webtoons.com
2025-03-06 20:11:03 -08:00
jvoisin
f916373f55
fix: allow the <b> tag
2025-03-06 19:27:30 -08:00
jvoisin
5353211206
fix: allow the <u> tag in feeds
2025-03-06 19:26:26 -08:00
Paul Stenius
0cf5051cf8
feat: show size of DB on the about page
2025-03-05 15:49:32 -08:00
