| Age | Commit message (Collapse) | Author | Lines |
|---|---|---|---|
| Say what really differs between the auth filters | Bryce Kwon | -6/+8 | |
| The lookups were never the only difference, since the configuration and trim's place differ as well. The configuration is now set off by blank lines, as in the other extensions, instead of a heading. | |||
| Drop auth guards for input cgit never sends | Bryce Kwon | -21/+10 | |
| cgit names no repository with an empty string, never nil, so the check that the index stays up proved nothing, and auth-file in fact refuses the index too while its repos file cannot be read. A session_seconds of 0 signs a session that has expired by the time it comes back, so it needs no branch of its own in set_cookie. | |||
| Strip control characters from the location alone | Bryce Kwon | -20/+12 | |
| set_cookie only ever writes an empty value or a token secure_value built from url-encoded text, digits and hex, so stripping it changed nothing. | |||
| Drop the URL helpers' guards that cannot fire | Bryce Kwon | -18/+2 | |
| Every caller hands the helpers a string, and a value with a line break is refused by validate_value whether or not CR LF is folded on the way. | |||
| Keep only the request fields the auth filters read | Bryce Kwon | -42/+10 | |
| Seven of the twelve fields filter_open stored were never read. Naming all twelve parameters keeps the order cgit passes them in on record. | |||
| Take a signed cookie apart with one match | Bryce Kwon | -82/+11 | |
| The loop let a valid cookie through with a field appended, a doubled separator or a zero in front of its expiry. The payload now carries the expiry as written, so only the spelling secure_value issues verifies. | |||
| Drop a highlighter check that tested the harness | Bryce Kwon | -6/+0 | |
| The filter hands a NUL through untouched, and only the harness's copy of cgit's sink cut the text there, so the check would have failed the day the filter replaced NULs the way about-render does. | |||
| Drop the highlighter's extension fallback | Bryce Kwon | -61/+13 | |
| The table of extensions and the second lookup served only a Scintillua with no detect(), which now leaves every file uncoloured but escaped. The fake detect() names a lexer after the file's suffix, so every test lexer is reached through it. | |||
| Call string.match like the rest of the highlighter | Bryce Kwon | -1/+1 | |
| Drop a stray blank line from the about-render tests | Bryce Kwon | -1/+0 | |
| Carry a man page's text as plain strings | Bryce Kwon | -23/+16 | |
| lpeg's constant, query and numbered captures already do what the token helpers did, and nothing ever read the tokens of an escape that draws nothing. | |||
| Take a no fill line's plain text from its nodes | Bryce Kwon | -7/+1 | |
| Wrap a man page's font runs with the macros' helper | Bryce Kwon | -27/+11 | |
| Reuse the digit pattern where it is spelt out | Bryce Kwon | -2/+2 | |
| Build the block start test from the line grammars | Bryce Kwon | -2/+1 | |
| Count a rule among the blocks that end a paragraph | Bryce Kwon | -7/+4 | |
| Inline the list check before indented code | Bryce Kwon | -6/+2 | |
| Read a setext heading's level off its capture | Bryce Kwon | -10/+4 | |
| Build every code block in one place | Bryce Kwon | -17/+11 | |
| Replace a readme's NUL bytes in one substitution | Bryce Kwon | -19/+3 | |
| Let the dispatch serve markdown without lpeg | Bryce Kwon | -5/+0 | |
| Without lpeg both renderers stay nil, and the handler lookup already falls back to plain text for a format it has no renderer for. | |||
| Render markdown and man pages through one function | Bryce Kwon | -28/+18 | |
| Everything that can raise already runs inside the parse and emit pcalls, so the outer one in filter_close could only ever have sent the page a second time. The size check moves to the dispatch with it. | |||
| Drop three needless forward declarations | Bryce Kwon | -9/+3 | |
| Drop fallbacks for a match that cannot fail | Bryce Kwon | -3/+3 | |
| A table capture of a pattern repeated zero or more times matches every string, the empty one included, so the inline grammars never return nil. | |||
| Drop the readme hooks that nothing reads | Bryce Kwon | -20/+12 | |
| Nothing in assets/ or in README's list of hooks reads a fenced block's data-lang or the manpage class on a man page's wrapper, so the header now names the two wrappers the stylesheet does style. | |||
| Declare the repository variables' struct in place | Bryce Kwon | -6/+4 | |
| Build cgit_ensure_end's copy in one expression | Bryce Kwon | -9/+1 | |
| Leave the zeroed repository fields to the memset | Bryce Kwon | -3/+0 | |
| Grow the repository and ref lists with ALLOC_GROW | Bryce Kwon | -24/+6 | |
| Join a diff line's pieces within one call | Bryce Kwon | -32/+8 | |
| Xdiff hands out_line a whole line each time, as the prefix, the record and any no-newline marker, and the fragment was already flushed before the call returned, so nothing ever carried over to the next call. | |||
| Cut two comments that repeat the header or a name | Bryce Kwon | -5/+3 | |
| Explain the encoded ampersand and plus at the table | Bryce Kwon | -6/+5 | |
| Map the markup characters to entities in one place | Bryce Kwon | -28/+34 | |
| Keep the permission triplet beside its one caller | Bryce Kwon | -13/+8 | |
| Keep the clone row and title docs in the header | Bryce Kwon | -11/+15 | |
| Keep three helpers beside their only callers | Bryce Kwon | -62/+62 | |
| Build cgit_date_mode's result on the stack | Bryce Kwon | -2/+1 | |
| Write the meta description in one place | Bryce Kwon | -6/+4 | |
| Read a title's path from the end with strrchr | Bryce Kwon | -20/+7 | |
| Trim trailing slashes with git's strbuf helper | Bryce Kwon | -12/+4 | |
| Build the full current url from the current url | Bryce Kwon | -8/+3 | |
| Fold the va_list error page into its one caller | Bryce Kwon | -13/+4 | |
| Ask head_is_named before carrying the branch | Bryce Kwon | -1/+1 | |
| Let self_link's fallback be a plain reporevlink | Bryce Kwon | -8/+2 | |
| Escape a submodule link's class like the others | Bryce Kwon | -6/+6 | |
| Open site and repository links through one helper | Bryce Kwon | -24/+17 | |
| Write each query argument through one helper | Bryce Kwon | -49/+30 | |
| Return repolink's delimiter without copying it | Bryce Kwon | -1/+1 | |
| Drop the query-string form of every link | Bryce Kwon | -86/+31 | |
| cgit falls back to SCRIPT_NAME for virtual_root whenever cgitrc leaves it out, so the ?url= and ?r= forms only ever reached an error page raised while cgitrc was still being read. The page argument of cgit_add_hidden_formfields fed only the url field, so it is unused until its callers stop passing it. | |||
| Stop leaking the host on an embedded page | Bryce Kwon | -3/+3 | |
