MrRSS v1.3.41

English

Added

• View multimedia images in fullscreen with a toolbar button or F; press Esc to leave fullscreen before closing the viewer. (#1264)

Fixed

• Automatically keep DMA-BUF rendering enabled on Wayland systems using AMD/Intel integrated graphics alongside an NVIDIA GPU, while retaining NVIDIA compatibility handling. No launch arguments are needed. (#1256)
• Prevent stored XSS and HTML parser mutation attacks; sanitize article, preview, translation, summary, and chat HTML, including older cached content. (GHSA-8q87-xm7v-xv7q, @kah-ja) (GHSA-fvgp-h89h-v273, @tonghuaroot)
• Fix Docker server builds omitting shared startup configuration, and add a server package build check to CI. (#1264)

Changed

• Update backend, frontend, and website dependencies; adapt browser feed loading to the new chromedp API and keep the Wails build CLI aligned with the backend. (#1253, #1257, #1258, #1262, #1263)

中文

新增

• 多媒体图片查看器支持通过工具栏按钮或 F 全屏；按 Esc 先退出全屏，再次按下关闭查看器。 (#1264)

修复

• 修复 Wayland 混合显卡设备使用 AMD/Intel 核显时被错误关闭 DMA-BUF 导致的卡顿，保留实际使用 NVIDIA 时的兼容处理，正常启动即可生效。 (#1256)
• 防止存储型 XSS 和 HTML 重解析攻击；统一清理正文、订阅预览、翻译、摘要和聊天回答中的 HTML，覆盖旧版本缓存。 (GHSA-8q87-xm7v-xv7q, @kah-ja) (GHSA-fvgp-h89h-v273, @tonghuaroot)
• 修复 Docker 服务端构建遗漏共享启动配置的问题，并在 CI 中增加完整 server 包构建检查。 (#1264)

调整

• 更新后端、前端和网站依赖，适配 chromedp 新 API，并保持 Wails 构建工具与后端版本一致。 (#1253, #1257, #1258, #1262, #1263)