Gate html serving behind trust-scan-config

enable-html-serving makes the plain page send a repository file as
text/html on the site's own origin, with no nosniff and no policy, so a
scanned repository could switch it on from its git config or cgitrc
without trust-scan-config and run script against every visitor. The
warning for a key read from git config also named a null repository,
because repo->path was set only after that file had been read.

0 files changed, 0 insertions, 0 deletions