Download Latest Version RSS-Bridge 2025-08-05 source code.tar.gz (2.0 MB)
Email in envelope

Get an email when there's a new version of RSS-Bridge

Home / 2025-01-02
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2024-12-29 3.5 kB
0
RSS-Bridge 2025-01-02 source code.tar.gz 2024-12-29 2.0 MB
0
RSS-Bridge 2025-01-02 source code.zip 2024-12-29 2.3 MB
0
Totals: 3 Items   4.3 MB 0

What's Changed

No breaking changes. Mostly fixes to existing bridges, and some new bridges.

But, beware that all bridges are now enabled by default! (instead of the selected handful).

If you dont want all bridges enabled do like this in config.ini.php:

:::ini
[system]

; Only these 3 bridges are enabled
enabled_bridges[] = CssSelectorBridge
enabled_bridges[] = FeedMerge
enabled_bridges[] = FeedReducerBridge

;enabled_bridges[] = *

Noteworthy changes

When debug mode is enabled, php errors are converted to exceptions! Only in debug mode, not in prod mode.

The future

These needs to be discussed:

  • Bump min php version from 7.4 to 8.0.
  • Introduce a new document root with separate data folder (e.g. /var/www/rss-bridge/public and /var/www/rss-bridge/var/)
  • rss-bridge is trivially vulnerable to XSS in the HtmlFormat page since we dont sanitize the html(mostly harmless since theres not much to exploit). Feed readers do sanitize html so no problem there.
  • rss-bridge is trivially vulnerable to SSRF (mostly harmless? hard to exfiltrate data) Also we actually want to allow to fetch resources from non-public IP addresses, so maybe introduce a config for this allowance

See also https://github.com/RSS-Bridge/rss-bridge/issues/2735

New Contributors

Thanks all!

Full Changelog: https://github.com/RSS-Bridge/rss-bridge/compare/2024-02-02...2025-01-02

Source: README.md, updated 2024-12-29