FreshRSS 1.30.2

• Milestone

This is a second security and bug-fixing release in the continuation of 1.30.x.

Note that our rolling-release channel (*edge*) is recommended for faster security patches.

Bug fixes highlights :

• Fix PHP 8.5+ deprecation warning with SQLite
• Block data: URI scheme in some cases

Performance highlights :

• Reduce memory consumption of export

This release has been made by @Alkarex, @Inverle and newcomers @abp002, @Arslan-TR, @Emredinho61, @HawkForge, @lordmarrik, @spa77k, @tomac4t, @tpq2030

Full changelog:

• Security
• SimplePie sanitizer: block data: URI scheme while keeping data:image for images #9417
• Mitigate some 404 situations #9435
• Do not log the Fever API key on authentication failure #9468
• Fix local DNS leak when fetching feeds through a proxy #9451
• Bug fixes
• WebSub fix POST, fix warning, better message #9420
• Fix PHP 8.5+ deprecation of sqliteCreateFunction for SQLite #9421
• Preserve explicit sort overrides when searching #9467
• Fix wrong order of args in extension compatibility check #9445
• Performance
• Reduce memory consumption of export #9350
• Features
• Better doc and log proxy cases #9436
• Extensions
• Update registerHook docs with newer PHP 8.1+ syntax for callables #9443, Extensions#548
• UI
• Disallow user page navigation while refreshing feeds #9446
• Various UI and style improvements #9426, #9441
• I18n
• Improve German #9439
• Improve Polish #9458
• Improve Turkish #9440
• Misc.
• Update to GT\CssXPath 1.6.0 #9411
• CI/CD: Fix login to Docker Hub #9433
• Fix SVGO zero percent filtering in CI #9422
• Update dev dependencies #9425