# FreshRSS 1.27.1 — FreshRSS 1.27.1 - Product: FreshRSS (https://whatsnew.fyi/product/freshrss) - Vendor: FreshRSS - Date: 2025-09-27 - Version: 1.27.1 - Original notes: https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.1 - Permalink: https://whatsnew.fyi/product/freshrss/releases/1.27.1 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — Automatic database recovery skips broken entries during CLI export/import - **added** — Add security option for CSP frame-ancestors - **added** — Lazy-load - **added** — Add possibility of Docker healthcheck - **security** — Regenerate session ID on login - **security** — Disallow setting non-existent language - **security** — Safer calling of install.php - **security** — Prevent log CR/LF injection - **security** — Restrict allowed cURL parameters - **security** — Fix reauthentication while updating - **security** — Fix some CSRFs - **fixed** — Include port number for HTTP Retry-After - **fixed** — Fix logic for searching labels - **fixed** — Fix cURL response parsing for HTTP redirections - **fixed** — Fix fetching OPML URL with special characters - **fixed** — Fix validation when creating a new user label - **fixed** — Fix bug in user self-deletion - **fixed** — Fix displaying of current date in main statistics - **fixed** — Fix UI JavaScript error when navigating to last article with keyboard - **changed** — Keep sort and order after marking as read * [Milestone](https://github.com/FreshRSS/FreshRSS/milestones/1.27.1) This is a security-fix and bug-fix release for [FreshRSS 1.27.x](https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.0). A few highlights ✨: * Keep sort and order criteria after marking as read * Automatic database recovery: skip broken entries during CLI export/import * Add possibility of Docker `healthcheck` * Add security option for CSP `frame-ancestors` * Several security fixes * Several bug fixes * New translation to Ukrainian * Improvements of some themes * And much more… This release has been made by @Alkarex, @Frenzie, @Inverle, @aledeg, @math-GH and newcomers @beerisgood, @nykula, @horvi28, @nhirokinet, @rnkln, @scmaybee. Full [changelog](https://github.com/FreshRSS/FreshRSS/blob/1.27.1/CHANGELOG.md): * Features * Automatic database recovery: skip broken entries during CLI export/import [#7949](https://github.com/FreshRSS/FreshRSS/pull/7949) * Add security option for CSP `frame-ancestors` [#7857](https://github.com/FreshRSS/FreshRSS/pull/7857), [#8021](https://github.com/FreshRSS/FreshRSS/pull/8021) * Lazy-load `` [#7997](https://github.com/FreshRSS/FreshRSS/pull/7997) * Security * Regenerate session ID on login [#7829](https://github.com/FreshRSS/FreshRSS/pull/7829) * Disallow setting non-existent language [#7878](https://github.com/FreshRSS/FreshRSS/pull/7878), [#7934](https://github.com/FreshRSS/FreshRSS/pull/7934) * Safer calling of `install.php` [#7971](https://github.com/FreshRSS/FreshRSS/pull/7971) * Prevent log CR/LF injection [#7883](https://github.com/FreshRSS/FreshRSS/pull/7883) * Restrict allowed cURL parameters [#7979](https://github.com/FreshRSS/FreshRSS/pull/7979), [#8009](https://github.com/FreshRSS/FreshRSS/pull/8009) * Fix reauthentication while updating [#7989](https://github.com/FreshRSS/FreshRSS/pull/7989) * Fix some CSRFs [#8000](https://github.com/FreshRSS/FreshRSS/pull/8000) * Bug fixing * Include port number for HTTP `Retry-After` [#7875](https://github.com/FreshRSS/FreshRSS/pull/7875) * Fix logic for searching labels [#7863](https://github.com/FreshRSS/FreshRSS/pull/7863) * Fix cURL response parsing for HTTP redirections [#7866](https://github.com/FreshRSS/FreshRSS/pull/7866) * Fix fetching OPML URL with special characters [#7843](https://github.com/FreshRSS/FreshRSS/pull/7843) * Fix validation when creating a new user label [#7890](https://github.com/FreshRSS/FreshRSS/pull/7890) * Fix bug in user self-deletion [#7877](https://github.com/FreshRSS/FreshRSS/pull/7877) * Fix displaying of current date in main statistics [#7892](https://github.com/FreshRSS/FreshRSS/pull/7892) * Fix default values on stat processing [#7891](https://github.com/FreshRSS/FreshRSS/pull/7891) * Fix UI JavaScript error when navigating to last article with keyboard [#7957](https://github.com/FreshRSS/FreshRSS/pull/7957) * Fix some links in anonymous mode [#8011](https://github.com/FreshRSS/FreshRSS/pull/8011), [#8012](https://github.com/FreshRSS/FreshRSS/pull/8012) * Fixes for `no-cache.txt` [#7907](https://github.com/FreshRSS/FreshRSS/pull/7907) * Fix Docker Traefik `.yml` and `SERVER_DNS` example [#7858](https://github.com/FreshRSS/FreshRSS/pull/7858) * SimplePie * Upstream contribution: Normalize encoding uppercase [simplepie#936](https://github.com/simplepie/simplepie/pull/936), [#7967](https://github.com/FreshRSS/FreshRSS/pull/7967) * Sync upstream, including bump to 1.9.0 with better PHP 8.5+ support [#7955](https://github.com/FreshRSS/FreshRSS/pull/7955) * Deployment * Docker improve `CMD` compatibility [#7861](https://github.com/FreshRSS/FreshRSS/pull/7861) * Add possibility of Docker healthcheck [#7945](https://github.com/FreshRSS/FreshRSS/pull/7945) * UI * Keep sort and order after marking as read [#7974](https://github.com/FreshRSS/FreshRSS/pull/7974) * Improve leave validation [#7830](https://github.com/FreshRSS/FreshRSS/pull/7830) * Improve _[Truncated at 4000 characters — full notes: https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.1]_