RSS-Bridge - Package Updates

girish

[1.2.0]

Update RSS Bridge to 2022-06-10
Full changelog
[GithubPullRequestBridge]: Sort by newest PRs by @SuperSandro2000 in #2064
[GBAtemp] Fix content extraction (#2313) by @ORelio in #2314
[Cdaction] Add new bridge by @tomaszkane in #2431
[CI] Add check, if php files are marked as executable by @em92 in #2439
[GooglePlayStoreBridge] Add bridge by @yamanq in #2110
[Core] Define buster instead of default bullseye for base image by @Bockiii in #2446

girish

[1.3.0]

girish

[1.4.0]

girish

[1.5.0]

Update RSS Bridge to 2023-03-22
Full changelog
fix: Let curl select the default HTTP version instead of hardcoding HTTP 1.1 (#3249)
fix: Disallow usage of default password (#3284)
refactor: Reformat codebase to PSR12 (#2872) [0]
feat: The docker container now uses libcurl-impersonate to better impersonate a browser (#2941)
feat: Config option to limit the maximum http message size (#3140)
feat: URL filter option to FilterBridge (#3212)

girish

[1.6.0]

Update RSS Bridge to 2023-07-11
Full changelog
new config enable_debug_mode and debug_mode_whitelist[] #3324
config now can be modified with env #3428
FeedMergeBridge now allows one or more feeds to fail while preserving the others #3476
feat: add health check action in #3484
feat: add system config enable_maintenance_mode #3497

girish

[1.6.1]

girish

[1.7.0]

Update RSS Bridge to 2023-09-24
Full changelog
The caching systems have been rewritten. All existing cache items will be considered expired.

girish

[1.8.0]

girish

[1.9.0]

Update RSS Bridge to 2024-02-02
Full changelog
chore: add tools for manually administrating the configured cache by @dvikan in #3867
fix: only escape iframe,script and link for html output by @dvikan in #3882
[AnnasArchiveBridge] Add new bridge by @Phantop in #3888
feat: add etag support to getContents by @dvikan in #3893
fix: add cache clearing tools by @dvikan in #3896
feat: token authentication by @dvikan in #3927

Package Updates

[1.10.0]

Update rss-bridge to 2025-01-02
Full Changelog
fix: convert php errors to exceptions when in debug mode by @dvikan in https://github.com/RSS-Bridge/rss-bridge/pull/4176
Bump min php version from 7.4 to 8.0.
Introduce a new document root with separate data folder (e.g. /var/www/rss-bridge/public and /var/www/rss-bridge/var/)
rss-bridge is trivially vulnerable to XSS in the HtmlFormat page since we dont sanitize the html(mostly harmless since theres not much to exploit). Feed readers do sanitize html so no problem there.
rss-bridge is trivially vulnerable to SSRF (mostly harmless? hard to exfiltrate data) Also we actually want to allow to fetch resources from non-public IP addresses, so maybe introduce a config for this allowance

Cloudron Forum