feedkeeper 0.28.3 → 0.28.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "feedkeeper",
-  "version": "0.28.3",
+  "version": "0.28.5",
   "description": "A lightweight, self-hosted RSS reader and remote MCP server for your news, blogs, and AI workflows.",
   "keywords": [
     "rss",
@@ -42,17 +42,17 @@
     "better-sqlite3": "^13.0.3",
     "cookie-session": "^2.1.1",
     "cors": "^2.8.6",
-    "dotenv": "^18.0.5",
+    "dotenv": "^18.0.8",
     "express": "^5.2.1",
     "express-rate-limit": "^8.7.1",
     "fast-xml-parser": "^5.11.2",
     "helmet": "^8.3.0",
     "ipaddr.js": "^2.5.0",
-    "jsdom": "^30.1.2",
+    "jsdom": "^30.1.3",
     "node-cron": "^4.6.0",
     "otpauth": "^9.5.2",
     "rss-parser": "^3.13.0",
-    "undici": "^8.11.2",
+    "undici": "^8.12.2",
     "web-push": "^3.6.7",
     "zod": "^4.6.5"
   }

package/server/dist/api/v1/resources.js

@@ -644,6 +644,7 @@ resourcesRouter.get("/items/:id/image", imageLimiter, async (req, res) => {
             res.status(503).json({ error: "image_busy" });
             return;
         }
+        console.error(`[image_proxy] Failed to fetch image for item ${req.params.id} (${src}):`, error instanceof Error ? error.message : error);
         res.status(502).json({ error: "image_unavailable" });
     }
 });

package/server/dist/feeds/extractor.js

@@ -34,6 +34,31 @@ function cleanConsentDom(doc) {
         }
     }
 }
+function resolveLazyImages(doc) {
+    const images = doc.querySelectorAll("img");
+    for (const img of images) {
+        const lazySrc = img.getAttribute("data-lazy-src") ||
+            img.getAttribute("data-src") ||
+            img.getAttribute("data-original") ||
+            img.getAttribute("data-actualsrc");
+        const src = img.getAttribute("src");
+        if (lazySrc && (!src || src.startsWith("data:") || src.length < 10)) {
+            img.setAttribute("src", lazySrc);
+        }
+        const lazySrcset = img.getAttribute("data-lazy-srcset") || img.getAttribute("data-srcset");
+        const srcset = img.getAttribute("srcset");
+        if (lazySrcset && (!srcset || srcset.startsWith("data:"))) {
+            img.setAttribute("srcset", lazySrcset);
+        }
+    }
+    const sources = doc.querySelectorAll("source");
+    for (const source of sources) {
+        const lazySrcset = source.getAttribute("data-lazy-srcset") || source.getAttribute("data-srcset");
+        if (lazySrcset) {
+            source.setAttribute("srcset", lazySrcset);
+        }
+    }
+}
 /**
  * Checks if a given URL or extracted HTML/text is a cookie / consent wall rather than article content.
  */
@@ -183,6 +208,7 @@ async function extractArticleContent(rawUrl, fetchImpl, signal) {
         try {
             const paywall = /"isAccessibleForFree"\s*:\s*(?:false|"false")/i.test(fetched.html);
             cleanConsentDom(dom.window.document);
+            resolveLazyImages(dom.window.document);
             parsed = new Readability(dom.window.document, { charThreshold: 60 }).parse();
             if (isConsentContent(fetched.url, parsed?.content ?? fetched.html, parsed?.title, parsed?.textContent)) {
                 return { status: "consent_wall" };

package/server/dist/feeds/opml.js

@@ -101,6 +101,7 @@ function extractOutlines(node, items = [], currentFolder) {
     }
     return items;
 }
+export const MAX_OPML_FEEDS = 2000;
 /**
  * Parses an OPML document string and returns a list of feed URLs and their labels.
  */
@@ -114,7 +115,11 @@ export function parseOpml(xmlContent) {
     if (!parsed || !parsed.opml || !parsed.opml.body) {
         throw new Error("invalid_opml_format");
     }
-    return extractOutlines(parsed.opml.body.outline);
+    const feeds = extractOutlines(parsed.opml.body.outline);
+    if (feeds.length > MAX_OPML_FEEDS) {
+        throw new Error("too_many_opml_feeds");
+    }
+    return feeds;
 }
 const urlSchema = z.string().url();
 /**

package/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feedkeeper/server",
-  "version": "0.28.3",
+  "version": "0.28.5",
   "private": true,
   "type": "module"
 }