FreshRSS
/
FreshRSS
mirror of https://github.com/FreshRSS/FreshRSS.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
FreshRSS/lib
History
Alexandre Alapetite 7aaed6092f
SimplePie replace iframe allow attribute (#6274) 
* SimplePie strip iframe allow attribute
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#allow

Besides security, the `allow autoplay` atttribute is especially problematic on mobile (Firefox on Android) as it asks to open the YouTube app as soon as the article is opened.

Example of code before:

```html
<iframe data-original="https://www.youtube.com/embed/??????feature=oembed" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="" sandbox="allow-scripts allow-same-origin"></iframe>
```

* Replace allow attribute

* Allow more
 		2024-04-11 08:48:50 +02:00
..
Minz PHP 8.3 #[\Override] (#6273) 2024-04-10 15:33:43 +02:00
SimplePie Fix SimplePie absolutize URL for several cases (#6270) 2024-04-08 11:13:01 +02:00
core-extensions Remove core extensions Google Groups and Tumblr (#5457) 2023-06-12 08:22:02 +02:00
marienfressinaud/lib_opml Update lib_opml to v0.5.1 (#5188) 2023-03-10 20:04:46 +01:00
phpgt/cssxpath CssXPath-StarSelector (#4506) 2022-08-18 11:14:40 +02:00
phpmailer/phpmailer Update to PHPMailer 6.9.1 (#6022) 2024-01-05 08:45:07 +01:00
.gitignore PHPMailer 6.8.0 (#5389) 2023-05-11 13:08:49 +02:00
.htaccess Patch for #2460: Run on Apache 2.4+ without mod_access_compat (#2461) 2019-07-31 13:48:06 +02:00
README.md Update to PHPMailer 6.6.0 with composer (#4329) 2022-05-14 23:38:16 +02:00
composer.json Update to PHPMailer 6.9.1 (#6022) 2024-01-05 08:45:07 +01:00
favicons.php Fix: Favicon with protocol-relative URLs have duplicate slashes. (#6068) 2024-01-26 11:08:10 +01:00
http-conditional.php Use strict_types (#5830) 2023-11-16 22:43:00 +01:00
lib_date.php Use strict_types (#5830) 2023-11-16 22:43:00 +01:00
lib_install.php PHPStan prepare exceptions (#6037) 2024-01-15 10:36:30 +01:00
lib_rss.php SimplePie replace iframe allow attribute (#6274) 2024-04-11 08:48:50 +02:00

README.md

Libraries

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.