Frédéric Guillot
b46b5dfb2a
Use r.RemoteAddr to check /metrics endpoint network access
...
HTTP headers like X-Forwarded-For or X-Real-Ip can be easily spoofed. As
such, it cannot be used to test if the client IP is allowed.
The recommendation is to use HTTP Basic authentication to protect the
metrics endpoint, or run Miniflux behind a trusted reverse-proxy.
2023-03-11 20:53:12 -08:00
Frédéric Guillot
cecab91298
Fix some linter issues
2022-08-08 22:06:38 -07:00
Frédéric Guillot
897d8644c5
Fix incorrect conversion between integer types
2022-01-19 21:23:56 -08:00
Gergan Penkov
4b6e46d9ab
Add Google Reader API implementation (experimental)
...
Co-authored-by: Sebastian Kempken <sebastian@kempken.io>
Co-authored-by: Gergan Penkov <gergan@gmail.com>
Co-authored-by: Dave Marquard <dave@marquard.org>
Co-authored-by: Moritz Fago <4459068+MoritzFago@users.noreply.github.com>
2022-01-02 19:45:12 -08:00
y0ast
05fd83bd6f
add support for ipv6 with zone index
2021-02-07 15:57:40 -08:00
Frédéric Guillot
04c4890124
API: Add the possibility to filter entries by a list of statuses
2020-09-12 21:35:18 -07:00
Frédéric Guillot
7a397c3d13
Change default theme to "system_serif"
2020-03-19 20:53:53 -07:00
Frédéric Guillot
afe1faf214
Add theme variants
...
- Use CSS variables instead of inherence
- Rename default theme to "Light - Serif"
- Rename Black theme to "Dark - Serif"
- Rename "Sans-Serif" theme to "Light - Sans Serif"
- Add "System" theme that use system preferences: Dark or Light
- Add Serif and Sans-Serif variants for each color theme
2019-09-21 20:04:42 -07:00
Frédéric Guillot
9f85f67031
Make sure the remote address is populated even when using unix socket
2018-11-11 16:42:30 -08:00
Frédéric Guillot
9dc38a0803
Add missing package descriptions for GoDoc
2018-10-08 17:32:17 -07:00
Frédéric Guillot
11dfcdd3d6
Fix typo in license header
2018-10-08 15:50:15 -07:00
Frédéric Guillot
9d08139f43
Improve request package and add more unit tests
2018-09-23 21:02:26 -07:00
Frédéric Guillot
c9f9dd3262
Store client IP address in request context
2018-09-09 15:15:14 -07:00
Frédéric Guillot
eee1f31903
Refactor HTTP context handling
2018-09-03 14:26:40 -07:00
Frédéric Guillot
dbcc5d8a97
Use canonical imports
2018-08-24 21:56:39 -07:00
Frédéric Guillot
36dab8b518
Add more filters for API call /entries
...
New filters:
- before (unix timestamp)
- before_entry_id
- after
- after_entry_id
- starred (boolean)
2018-06-09 19:13:41 -07:00
Frédéric Guillot
3b39f0883c
Rewrite RealIP() to avoid returning an empty string
2018-06-01 07:22:31 -07:00
Frédéric Guillot
f49b42f70f
Use vanilla HTTP handlers (refactoring)
2018-04-29 16:35:04 -07:00
