Permalink
Commits on Sep 20, 2017
  1. README: mention the project is unmaintained

    Minoru committed Sep 20, 2017
Commits on Sep 17, 2017
  1. Update changelog with CVE ID for Podbeuter bug

    Minoru committed Sep 17, 2017
Commits on Sep 16, 2017
  1. Add changelog entry for Podbeuter vulnerability fix

    Minoru committed Sep 16, 2017
  2. Work around shell code in podcast names (#598)

    Minoru committed Aug 27, 2017
Commits on Sep 14, 2017
  1. Add 2.10 entry to changelog

    Minoru committed Jun 15, 2016
  2. Use SQLite to search within query feeds

    Minoru committed Sep 14, 2017
    This guarantees that the search within query feeds behaves exactly the
    same as the search within ordinary feeds. Fixes #520.
  3. Replace the last NULL in our code with nullptr

    Minoru committed Sep 14, 2017
    (The ones in filter/ don't count because they're autogenerated, and the
    ones in test/catch.hpp are effectively in external library.)
Commits on Sep 13, 2017
  1. consolidate_whitespace keeps leading whitespace

    Minoru committed Sep 13, 2017
  2. When wrapping, repeat indentation on each line

    Minoru committed Sep 13, 2017
    Fixes #481.
Commits on Sep 4, 2017
  1. Revert "intercept browser's failure (issue #448) (#592)"

    Minoru committed Sep 4, 2017
    This reverts commit e0f9100.
  2. Revert "intercept browser's/pager's failure (issue #449)"

    Minoru committed Sep 4, 2017
    This reverts commit 61639b2.
  3. Revert "improved code quality according to Minoru's advice"

    Minoru committed Sep 4, 2017
    This reverts commit 930605c.
  4. Revert "improved code quality according to Minoru's advice"

    Minoru committed Sep 4, 2017
    This reverts commit 7455313.
  5. Revert "improved code quality according to Minoru's advice"

    Minoru committed Sep 4, 2017
    This reverts commit d3b455c.
Commits on Sep 2, 2017
  1. Merge branch 'feature/upgrade-to-trusty-on-travis'

    Minoru committed Sep 2, 2017
  2. Add Clang 5.0 to Travis CI

    Minoru committed Aug 31, 2017
  3. Add GCC 7 to Travis CI

    Minoru committed Aug 31, 2017
  4. Travis: install dependencies via config

    Minoru committed Aug 31, 2017
    The idea with YAML references comes from travis-ci/travis-ci#3505
  5. Upgrade to Trusty on Travis

    Minoru committed Aug 31, 2017
Commits on Aug 31, 2017
  1. Merge pull request #593 from Arlon1/external_cmd_failure

    Minoru committed Aug 31, 2017
    intercept browser's/pager's failure (#449)
Commits on Aug 30, 2017
  1. improved code quality according to Minoru's advice

    Arlon1 committed Aug 30, 2017
Commits on Aug 28, 2017
  1. improved code quality according to Minoru's advice

    Arlon1 committed Aug 28, 2017
Commits on Aug 24, 2017
  1. improved code quality according to Minoru's advice

    Arlon1 committed Aug 24, 2017
    added warn_unused_result macros to methods open_in_browser(), open_in_pager()
    and run_interactively()
Commits on Aug 21, 2017
  1. intercept browser's/pager's failure (issue #449)

    Arlon1 committed Aug 21, 2017
    newsbeuter utilizes the system(3) function to run external programs.
    Examples for external programs are a text editor, an extermal pager or the
    browser.
    Those external programs may return a non-zero exit code. This patch intercepts
    in a such case and prints an error message as well as a debugging output.
Commits on Aug 20, 2017
  1. intercept browser's failure (issue #448) (#592)

    Arlon1 committed with Minoru Aug 20, 2017
    intercept browser's failure (#448)
    
    When opening a link the browser may return a value unequal to zero.
    This gets recognized, and error is displayed and logged.
    
    If this happens during the "open-in-browser-and-mark-read"-operation neither
    the article in question is marked as read nor it is scrolled down.
Commits on Aug 17, 2017
  1. Sanitize inputs to bookmark-cmd (#591)

    Minoru committed Aug 13, 2017
    Newsbeuter didn't properly shell-escape the arguments passed to
    bookmarking command, which allows a remote attacker to perform remote
    code execution by crafting an RSS item whose title and/or URL contain
    something interpretable by the shell (most notably subshell
    invocations.)
    
    This has been reported by Jeriko One <jeriko.one@gmx.us>, complete with
    PoC and a patch.
    
    This vulnerability was assigned CVE-2017-12904.
Commits on Aug 12, 2017
  1. Show HTTP error code if fetching failed

    Minoru committed Aug 12, 2017
  2. Use new name for CURLOPT_ENCODING

    Minoru committed Aug 12, 2017