Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on lemmy.blackeco.com
selfhosted·SelfhostedbyBlackEco

PSA: Next version of FreshRSS will have a breaking change for users with feeds in local network (think RSS-Bridge or RSSHub) to improve security

Breaking change in #FreshRSS for those of you with feeds on your local network such as RSS-Bridge or RSSHub: for improving security (SSRF), local addresses must be added to your allowed list. There are a Web UI and an environment variable INTERNAL_HOST_ALLOWLIST, whichever is easiest. Breaking changes in FreshRSS are rare, but this has been made default since not everybody is able to properly isolate their services. This has just landed in the rolling release (edge). Tests welcome.

https://framapiaf.org/@freshrss/116828770254213489Open linkView original on lemmy.blackeco.com
79

1 reply

You reached the end

PSA: Next version of FreshRSS will have a breaking change for users with feeds in local network (think RSS-Bridge or RSSHub) to improve security | Spyke