Breaking change in #FreshRSS for those of you with feeds on your local network such as RSS-Bridge or RSSHub: for improving security (SSRF), local addresses must be added to your allowed list. There are a Web UI and an environment variable INTERNAL_HOST_ALLOWLIST, whichever is easiest. Breaking changes in FreshRSS are rare, but this has been made default since not everybody is able to properly isolate their services. This has just landed in the rolling release (edge). Tests welcome.
Next version of FreshRSS will have a breaking change for users with feeds in local network (think RSS-Bridge or RSSHub) to improve security
Submitted 1 day ago by
BlackEco@lemmy.blackeco.com to selfhosted@lemmy.world
https://framapiaf.org/@freshrss/116828770254213489
Thanks.