No description
eb9508502c
Creating an RSS feed item with the inline description containing an `<img>` tag with a `srcset` attribute pointing to an invalid URL like `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error condition where the invalid URL is returned unescaped and in full. This results in JavaScript execution on the Miniflux instance as soon as the user is convinced to open the broken image. |
||
|---|---|---|
| .devcontainer | ||
| .github | ||
| api | ||
| cli | ||
| client | ||
| config | ||
| contrib | ||
| crypto | ||
| database | ||
| errors | ||
| fever | ||
| googlereader | ||
| http | ||
| integration | ||
| locale | ||
| logger | ||
| metric | ||
| model | ||
| oauth2 | ||
| packaging | ||
| proxy | ||
| reader | ||
| service | ||
| storage | ||
| systemd | ||
| template | ||
| tests | ||
| timer | ||
| timezone | ||
| ui | ||
| url | ||
| validator | ||
| version | ||
| worker | ||
| .gitignore | ||
| ChangeLog | ||
| doc.go | ||
| go.mod | ||
| go.sum | ||
| LICENSE | ||
| main.go | ||
| Makefile | ||
| miniflux.1 | ||
| Procfile | ||
| README.md | ||
| SECURITY.md | ||
Miniflux 2
Miniflux is a minimalist and opinionated feed reader:
- Written in Go (Golang)
- Works only with Postgresql
- Doesn't use any ORM
- Doesn't use any complicated framework
- Use only modern vanilla Javascript (ES6 and Fetch API)
- Single binary compiled statically without dependency
- The number of features is voluntarily limited
It's simple, fast, lightweight and super easy to install.
Official website: https://miniflux.app
Documentation
The Miniflux documentation is available here: https://miniflux.app/docs/ (Man page)
- Opinionated?
- Features
- Requirements
- Installation Instructions
- Upgrading to a New Version
- Configuration
- Command Line Usage
- User Interface Usage
- Keyboard Shortcuts
- Integration with External Services
- Rewrite and Scraper Rules
- API Reference
- Development
- Internationalization
- Frequently Asked Questions
Screenshots
Default theme:
Dark theme when using keyboard navigation:
Credits
- Authors: Frédéric Guillot - List of contributors
- Distributed under Apache 2.0 License