1
0
Fork 0
mirror of https://github.com/miniflux/v2.git synced 2025-08-26 18:21:01 +00:00
miniflux-v2/internal/ui
jvoisin da9c3a4032 feat(js): tighten the trusted types policy
- Implement a better/simpler polyfill for web browsers that don't supported
  trusted types yet
- Use two separate policies: one to create HTML, another to create/use script
  urls
- Instead of having the policy live in the top-level scope, they're now
  declared at the lowest possible scope, right before they're used, making them
  inaccessible outside of it. This puts their usage completely out of reach of
  an attacker unable to gain some control outside of those two (small) scopes,
  and thus removes the need to tighten the policies.
- Remove the now-unused tt.js file

This has been tested on Firefox (doesn't support trusted types) and on Chromium
(does support trusted types).
2025-08-21 19:41:45 -07:00
..
form feat(integration): add LinkTaco service for saving articles 2025-08-20 20:35:33 -07:00
session feat(integration)!: remove Pocket integration 2025-06-15 13:29:55 -07:00
static feat(js): tighten the trusted types policy 2025-08-21 19:41:45 -07:00
view refactor: unexport symbols 2025-08-07 17:27:04 -07:00
about.go feat: show size of DB on the about page 2025-03-05 15:49:32 -08:00
api_key_create.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
api_key_list.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
api_key_remove.go feat(api): add new endpoints to manage API keys 2025-05-25 15:50:13 -07:00
api_key_save.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
category_create.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
category_edit.go fix(api): hide_globally categories field should be a boolean 2025-04-21 19:43:25 -07:00
category_entries.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
category_entries_all.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
category_entries_starred.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
category_feeds.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
category_list.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
category_mark_as_read.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
category_refresh.go refactor(http): use time.Duration for refresh interval 2025-08-20 19:45:24 -07:00
category_remove.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
category_remove_feed.go fix(ui): Redirect correctly post feed removal from category feeds list 2025-01-27 17:43:54 -08:00
category_save.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
category_update.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
entry_category.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
entry_enclosure_save_position.go Avoid warnings in ui package 2024-03-15 19:49:39 -07:00
entry_feed.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
entry_read.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
entry_save.go Add webhook event for saving entry 2023-09-10 18:17:33 -07:00
entry_scraper.go Rename PROXY_* options to MEDIA_PROXY_* 2024-03-20 21:28:28 -07:00
entry_search.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
entry_starred.go refactor: Replace "Bookmarks" with "Starred" 2025-08-20 20:49:45 -07:00
entry_tag.go feat: mark media as read when playback reaches 90% 2024-07-28 12:29:45 -07:00
entry_toggle_starred.go refactor: Replace "Bookmarks" with "Starred" 2025-08-20 20:49:45 -07:00
entry_unread.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
entry_update_status.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
feed_edit.go feat: add entry filters at the feed level 2025-06-19 15:15:16 -07:00
feed_entries.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
feed_entries_all.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
feed_icon.go fix(security): use a more restrictive CSP for untrusted content 2025-03-29 19:49:41 -07:00
feed_list.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
feed_mark_as_read.go perf(storage): avoid heavy-weight SQL when marking feed as read 2025-08-05 18:01:58 -07:00
feed_refresh.go refactor(http): use time.Duration for refresh interval 2025-08-20 19:45:24 -07:00
feed_remove.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
feed_update.go feat: implement proxy URL per feed 2025-04-06 21:05:19 -07:00
handler.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
history_entries.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
history_flush.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
integration_show.go feat(integration): add LinkTaco service for saving articles 2025-08-20 20:35:33 -07:00
integration_update.go feat(integration): add LinkTaco service for saving articles 2025-08-20 20:35:33 -07:00
login_check.go feat: Add option to disable local auth form 2024-08-12 19:27:08 -07:00
login_show.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
logout.go Implement structured logging using log/slog package 2023-09-24 22:37:33 -07:00
middleware.go refactor(misc): Use proper slog.XXX instead of slog.Any 2025-06-29 12:30:17 -07:00
oauth2.go Add profile scope to OIDC integration to support accounts without email 2023-09-08 20:26:42 -07:00
oauth2_callback.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
oauth2_redirect.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
oauth2_unlink.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
offline.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
opml_export.go Add command line argument to export user feeds 2023-09-27 21:45:23 -07:00
opml_import.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
opml_upload.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
pagination.go Add navigation to last/first page 2024-06-28 20:19:38 -07:00
proxy.go fix(mediaproxy): always forward the browser Accept header 2025-08-18 18:08:21 -07:00
search.go Move search form to a dedicated page 2024-03-01 16:56:15 -08:00
session_list.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
session_remove.go Implement structured logging using log/slog package 2023-09-24 22:37:33 -07:00
settings_show.go feat(ui): add user setting to control target="_blank" on links 2025-06-08 21:07:11 -07:00
settings_update.go refactor(ui): standardize user variable naming and avoid a SQL query when only userID is used 2025-08-11 19:48:36 -07:00
share.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
shared_entries.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
starred_entries.go refactor: Replace "Bookmarks" with "Starred" 2025-08-20 20:49:45 -07:00
static_app_icon.go perf(static): minimize the SVG 2025-08-09 15:38:43 -07:00
static_favicon.go perf(static): minimize the SVG 2025-08-09 15:38:43 -07:00
static_javascript.go refactor(static): use a simple struct instead of two slices to store assets data and checksums 2025-08-05 19:35:27 -07:00
static_manifest.go feat(ui): add PWA app shortcuts 2025-08-07 20:47:08 -07:00
static_stylesheet.go refactor(static): use a simple struct instead of two slices to store assets data and checksums 2025-08-05 19:35:27 -07:00
subscription_add.go feat: add proxy rotation functionality 2025-04-06 14:59:00 -07:00
subscription_bookmarklet.go feat: add proxy rotation functionality 2025-04-06 14:59:00 -07:00
subscription_choose.go feat: add entry filters at the feed level 2025-06-19 15:15:16 -07:00
subscription_submit.go feat: add entry filters at the feed level 2025-06-19 15:15:16 -07:00
tag_entries_all.go fix: improve pagination when having identical publication date 2025-01-18 16:59:48 -08:00
ui.go refactor: Replace "Bookmarks" with "Starred" 2025-08-20 20:49:45 -07:00
unread_entries.go feat(config)!: remove SERVER_TIMING_HEADER config option 2025-06-15 14:17:28 -07:00
unread_entry_category.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
unread_entry_feed.go feat: add option to always open articles externally 2025-05-24 19:46:01 -07:00
unread_mark_all_read.go Move internal packages to an internal folder 2023-08-10 20:29:34 -07:00
user_create.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
user_edit.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
user_list.go Delay call of view.New after logging the user in 2024-03-03 20:32:15 -08:00
user_remove.go Implement structured logging using log/slog package 2023-09-24 22:37:33 -07:00
user_save.go Refactor HTTP Client and LocalizedError packages 2023-10-22 13:09:30 -07:00
user_update.go Refactor HTTP Client and LocalizedError packages 2023-10-22 13:09:30 -07:00
webauthn.go feat(webauthn): perfer creation of a client-side discoverable credential 2025-05-22 20:14:00 -07:00