PSA: Next version of FreshRSS will have a breaking change for users with feeds in local network (think RSS-Bridge or RSSHub) to improve security (framapiaf.org)

submitted 9 hours ago* (last edited 9 hours ago) by BlackEco@lemmy.blackeco.com to c/selfhosted@lemmy.world

1 comments fedilink hide all child comments

Breaking change in #FreshRSS for those of you with feeds on your local network such as RSS-Bridge or RSSHub: for improving security (SSRF), local addresses must be added to your allowed list. There are a Web UI and an environment variable INTERNAL_HOST_ALLOWLIST, whichever is easiest. Breaking changes in FreshRSS are rare, but this has been made default since not everybody is able to properly isolate their services. This has just landed in the rolling release (edge). Tests welcome.

top 1 comments

sorted by: hot top new old

[-] CorrectAlias@piefed.blahaj.zone 2 points 4 hours ago

Thanks.

this post was submitted on 28 Jun 2026

57 points (100.0% liked)

Selfhosted

60210 readers

984 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world