RSS-Bridge 2025-01-02

EDIT: I forgot to update version number in this release, see #4382

What's Changed

No breaking changes. Mostly fixes to existing bridges, and some new bridges.

But, beware that all bridges are now enabled by default! (instead of the selected handful).

If you dont want all bridges enabled do like this in config.ini.php:

[system]

; Only these 3 bridges are enabled
enabled_bridges[] = CssSelectorBridge
enabled_bridges[] = FeedMerge
enabled_bridges[] = FeedReducerBridge

;enabled_bridges[] = *

Noteworthy changes

When debug mode is enabled, php errors are converted to exceptions! Only in debug mode, not in prod mode.

• fix: convert php errors to exceptions when in debug mode by @dvikan in #4176

The future

These needs to be discussed:

• Bump min php version from 7.4 to 8.0.
• Introduce a new document root with separate data folder (e.g. /var/www/rss-bridge/public and /var/www/rss-bridge/var/)
• rss-bridge is trivially vulnerable to XSS in the HtmlFormat page since we dont sanitize the html(mostly harmless since theres not much to exploit). Feed readers do sanitize html so no problem there.
• rss-bridge is trivially vulnerable to SSRF (mostly harmless? hard to exfiltrate data) Also we actually want to allow to fetch resources from non-public IP addresses, so maybe introduce a config for this allowance

See also #2735

New Contributors

Thanks all!

• @zamentur made their first contribution in #3947
• @gi-yt made their first contribution in #4076
• @facutuesca made their first contribution in #4092
• @Albatrosicks made their first contribution in #4111
• @vlnst made their first contribution in #4131
• @mazzz1y made their first contribution in #4154
• @enwuenwu made their first contribution in #4156
• @NotsoanoNimus made their first contribution in #4160
• @quent1-fr made their first contribution in #4189
• @bloominstrong made their first contribution in #4247
• @osvfj made their first contribution in #4263
• @AlexanderS made their first contribution in #4260
• @tbelbek made their first contribution in #4293
• @jonastaedcke made their first contribution in #4271
• @TangentFoxy made their first contribution in #4317
• @deffy92 made their first contribution in #4318
• @swofl made their first contribution in #4330
• @thomas-333 made their first contribution in #4341
• @Okbaydere made their first contribution in #4355
• @Vynce made their first contribution in #4359

Full Changelog: 2024-02-02...2025-01-02