The update also makes it easier to organize and search feeds, thanks to new sorting options by category or feed title, and a search operator ( On the technical side, FreshRSS has begun supporting PHP 8.5+, with its Docker alternative image already shipping Alpine 3.22 and PHP 8.4. Meanwhile, the default Debian-based Docker image has been refreshed to PHP 8.2, with PHP 8.4 support promised soon.<\/p>\n\n\n\n On the security side, FreshRSS now includes a reauthentication \u201csudo mode\u201d for sensitive actions, stricter Content-Security-Policy headers (including frame-ancestors enforcement), and safeguards like cookie regeneration after logout and requiring the current password before setting a new one.<\/p>\n\n\n\n Additionally, access checks and permission fixes across user and feed-related actions further tighten the platform\u2019s defenses.<\/p>\n\n\n\n Beyond that, the release squashes a range of bugs, including issues with feed scraping, WebSub redirection, XML encoding, and support for feeds encoded in UTF-16LE. Improvements to the bundled SimplePie library also ensure more consistent handling of edge cases in feed parsing.<\/p>\n\n\n\n For developers and extension authors, FreshRSS 1.27 expands the extension API with new hooks and endpoints, making integrations easier. Lastly, the UI has also seen some polish with updates to chart.js, better lazy-loading behavior, and refinements to confirmation dialogs and styling.<\/p>\n\n\n\nc:<\/code>) that allows filtering by categories. Regarding customization, users can now add custom feed favicons, plus there is a reworked favicon fetching designed to reduce unnecessary network requests.<\/p>\n\n\n\n![\"FreshRSS](\"https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/08\/freshrss127-web-ui.jpg\")
<\/a>