FreshRSS 1.27.0
A few highlights ✨:
- Implement support for HTTP
429 Too Many Requestsand503 Service Unavailable, obeyRetry-After - Add sort by category title, or by feed title
- Add search operator
c:for categories likec:23,34or!c:45,56 - Custom feed favicons
- Several security improvements, such as:
- Implement reauthentication (sudo mode)
- Add
Content-Security-Policy: frame-ancestors - Ensure CSP everywhere
- Fix access rights when creating a new user
- Several bug fixes, such as:
- Fix redirections when scraping from HTML
- Fix feed redirection when coming from WebSub
- Fix support for XML feeds with HTML entities, or encoded in UTF-16LE
- Docker alternative image updated to Alpine 3.22 with PHP 8.4 (PHP 8.4 for default Debian image coming soon)
- Start supporting PHP 8.5+
- And much more…
This release has been made by @Alkarex, @Inverle, @the7thNightmare and newcomers @Deioces120, @Fraetor, @Tarow, @dotsam, @hilariousperson, @pR0Ps, @triatic, @tryallthethings
Full changelog:
- Features
- Implement support for HTTP
429 Too Many Requestsand503 Service Unavailable, obeyRetry-After#7760 - Add sort by category title, or by feed title #7702
- Add search operator
c:for categories likec:23,34or!c:45,56#7696 - Custom feed favicons #7646, #7704, #7717,
#7792 - Rework fetch favicons for fewer HTTP requests #7767
- Add more unicity criteria based on title and/or content #7789
- Automatically restore user configuration from backup #7682
- API add support for states in
sparameter ofstreamId#7695 - Improve sharing via Print #7728
- Redirect to the login page from bookmarklet instead of 403 #7782
- Clean local cache more often, when refreshing feeds #7827
- Implement support for HTTP
- Security
- Implement reauthentication (sudo mode) #7753
- Add
Content-Security-Policy: frame-ancestors#7677 - Ensure CSP everywhere #7810
- Show warning when unsafe CSP policy is in use #7804
- Fix access rights when creating a new user #7783
- Improve security of form for user details #7771, #7786
- Disallow setting non-existent theme #7722
- Regenerate cookie ID after logging out #7762
- Require current password when setting new password #7763
- Add missing access checks for feed-related actions #7768
- Strip more unsafe attributes such as
referrerpolicy,ping#7770 - Remove unneeded execution permissions #7802
- Bug fixing
- Fix redirections when scraping from HTML #7654, #7741
- Fix multiple authentication HTTP headers #7703
- Fix HTML queries with a single feed #7730
- WebSub: only perform a redirection when coming from WebSub #7738
- Include enclosures in entries’ hash #7719
- Negative side-effect: users of the option to automatically mark updated articles as unread will once have some articles with enclosures re-appear as unread
- Fix cancellation of slider exit UI #7705
- Honor disable update on update page #7733
- Fix no registration limit setting #7751
- Fix XML encoding of sharing functions #7822
- SimplePie
- Fix propagation of HTTP error codes #7670
- Fix support for XML feeds with HTML entities #7689, simplepie#915
- Fix feeds encoded in UTF-16LE #7691, simplepie#916
- Various upstream contributions simplepie#917, simplepie#924,
simplepie#926, simplepie#932, simplepie#933 - Sync upstream #7706, FreshRSS/simplepie#45, #7775,
FreshRSS/simplepie#50, #7824, #7825, - Fix regex Backtrack limit was exhausted in
clean_hash()#7813, FreshRSS/simplepie#48
- Deployment
- Docker default image (Debian 12 Bookworm) updated to PHP 8.2.29 #7805
- Docker alternative image updated to Alpine 3.22 with PHP 8.4.11 and Apache 2.4.65 #7740, #7740,
#7803 - Start supporting PHP 8.5+ #7787, #7826
- Docker Alpine dev image
:newestupdated to PHP 8.5-alpha and Apache 2.4.65 #7773
- Docker Alpine dev image
- Docker: interpolate
FRESHRSS_INSTALLandFRESHRSS_USERvariables #7725 - Docker: Reduce how much data needs to be chown/chmod’ed on container startup #7793
- Test for database PDO typing support during install (relevant for MySQL / MariaDB with obsolete driver) #7651
- Extensions
- UI
- Improve mark as read request showing popup due to
onbeforeunload#7554 - Fix lazy-loading for
<video poster="...">and<image>#7636 - Avoid styling
<code>inside of<pre>#7797 - Improve confirmation logic with
data-auto-leave-validation#7785 - Update
chart.jsto 4.5.0 #7752, #7816 - Various UI and style improvements: #7616, #7811
- Improve mark as read request showing popup due to
- I18n
- Misc.
Die Düsseldorfer EG spielt auch in der neuen Saison nach der Sommerpause wieder in der DEL2. Wir begleiten die Personalplanung und alle Entwicklungen beim achtmaligen Deutschen Meister in unserem Liveblog.

Die Düsseldorfer haben den unabhängig vom Abstieg auslaufenden Vertrag mit dem Routinier um ein Jahr verlängert. Perspektivisch soll es für ihn in der U23 weitergehen. In unserem Blog halten wir Sie auf dem Laufenden.
