Age	Commit message (Collapse)	Author	Lines
2026-07-25	Tighten the gitignore and gitattributes rules	Bryce Kwon	-5/+24
2026-07-25	Bound syntax-highlight memory and widen coverage	Bryce Kwon	-74/+173
2026-07-25	Rework link-commits into a rules filter	Bryce Kwon	-14/+140
2026-07-25	Guard the avatar filters and expose settings	Bryce Kwon	-23/+181
2026-07-25	Harden and reorganize the auth filters	Bryce Kwon	-334/+667
2026-07-25	Add a dist target and build releases through it	Bryce Kwon	-10/+24
2026-07-25	Reorganize and simplify the Makefile	Bryce Kwon	-97/+98
2026-07-25	Remove the PDF documentation output	Bryce Kwon	-22/+6
2026-07-25	Make the clean targets remove real test output	Bryce Kwon	-3/+6
2026-07-21	Emit a conforming `rel=icon` for the favicon link	Bryce Kwon	-4/+5
2026-07-21	Redraw the logo and favicon at higher resolution	Bryce Kwon	-0/+10
2026-07-21	Widen the `robots.txt` rules to extensionless paths	Bryce Kwon	-3/+2
2026-07-21	Build the sources with `-fno-common`	Bryce Kwon	-0/+7
	Apple clang still defaults to `-fcommon`, so git's 64 KB packet_buffer became a common symbol whose size drove a 32 KB section alignment that ld64 then clamped to the 16 KB page size, warning on every macOS link. Everywhere else already compiles with `-fno-common`.
2026-07-20	Gate the stats page and add a language breakdown	Bryce Kwon	-24/+297
	`max-stats` only bounds the selectable periods now and no longer doubles as the enable switch. The tree walk runs before the history walk on purpose. Releasing commit memory while walking history resets each commit slab index, and a commit graph lookup afterwards would read another commit slot and walk the wrong tree. The stats fixture writes a commit graph so the tests cover that path. The history walk bounds the window in process rather than passing a formatted since date to `setup_revisions`, and parses each commit once.
2026-07-19	Release v2.1.0v2.1.0	Bryce Kwon	-1/+1
2026-07-19	Keep the version fallback in shallow builds	Bryce Kwon	-2/+8
	A checkout without tags made `git describe` fail and the empty result overwrote the fallback, so CI release binaries carried no version at all. The release workflow now also fetches tags so a tag build stamps its exact version.
2026-07-19	Run CI only on branch pushes	Bryce Kwon	-1/+2
2026-07-19	Even out font sizes and drop dead styles	Bryce Kwon	-116/+47
2026-07-19	Remove the owner filter hook	Bryce Kwon	-55/+3
2026-07-19	Declutter the interface on small screens	Bryce Kwon	-36/+32
2026-07-19	Follow the theme in the external tab icon	Bryce Kwon	-3/+13
2026-07-19	Highlight and center fragment-targeted lines	Bryce Kwon	-0/+79
2026-07-19	Move syntax highlighting to a Lua source filter	Bryce Kwon	-250/+247
2026-07-19	Stat oversized diffs instead of inlining them	Bryce Kwon	-3/+130
2026-07-19	Cap and paginate the ref listings	Bryce Kwon	-14/+189
2026-07-19	Add a help page with common workflows	Bryce Kwon	-0/+182
2026-07-19	Keep line structure in plaintext readmes	Bryce Kwon	-1/+29
2026-07-19	Submit option forms without inline handlers	Bryce Kwon	-6/+34
2026-07-16	Add security and fork-behaviour regression testsv2.0.0	Bryce Kwon	-0/+113
2026-07-16	Rewrite the README for the fork as `README.txt`	Bryce Kwon	-99/+144
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-34/+42
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-16	Add a post-update hook for HTTP clones	Bryce Kwon	-0/+18
	cgit's built-in clone support speaks the dumb HTTP protocol, which serves static files that only `git update-server-info` refreshes. Without this hook a clone can miss refs pushed after the repository was created.
2026-07-16	Add example web server configurations	Bryce Kwon	-0/+477
	The wiring has real pitfalls around PATH_INFO and the link base, so these ship as working commented configs. nginx needs the fcgiwrap bridge while apache and lighttpd run the CGI directly. The security headers live here rather than in cgit because they must also cover the static assets the server serves itself.
2026-07-16	Add a commented example configuration	Bryce Kwon	-0/+548
2026-07-16	Harden the auth filter headers and session cookie	Bryce Kwon	-10/+62
	The filters signed the request url and later wrote it into a Location header, and the signing step re-encoded a newline that the verifying step decoded back, so a crafted url could smuggle CR and LF into the response. The cookie HMAC was also checked with a short-circuiting comparison and carried no SameSite attribute.
2026-07-16	Prune and rename the filter extensions	Bryce Kwon	-461/+37
	The gentoo LDAP filter is distro specific, the owner example only restates what cgit already renders, and the about converters are superseded by the built-in markdown rendering. The two auth filters do the same job and differ only in where their accounts live, so they become `auth-inline` for accounts kept in the script and `auth-file` for accounts kept on disk.
2026-07-16	Convert the commit-links filter to Lua	Bryce Kwon	-28/+27
	Lua is becoming the one language for the filter extensions, and this was the last shell filter.
2026-07-16	Drop unused config and query fields	Bryce Kwon	-7/+0
2026-07-16	Key the cache on scheme and host	Bryce Kwon	-2/+15
	Clone urls and atom links are built from the request scheme and Host, but the cache key left them out, so a request with a spoofed Host could cache a page carrying a bogus clone url and serve it to other visitors.
2026-07-16	Close the layout on stat-only diffs	Bryce Kwon	-1/+4
	The stat-only diff path returned before the closing call, so the content wrapper, footer and closing tags were never emitted.
2026-07-16	Emit `updated` on an empty atom feed	Bryce Kwon	-0/+7
	The feed-level element was written only inside the commit loop, so a feed with no commits omitted an element the atom format requires.
2026-07-16	Fix diffstat and submodule diff output	Bryce Kwon	-7/+11
	The diffstat divided by zero when a commit changed no lines, and a submodule change was printed with a hardcoded length that dropped a digit of a sha-1 and most of a sha-256.
2026-07-16	URL-encode the repolist pager links	Bryce Kwon	-2/+2
	The pager html-escaped its search and sort values instead of url-encoding them, so a term with a hash or ampersand broke the link and dropped the active filter on the next page.
2026-07-16	Bound the authenticate-post length safely	Bryce Kwon	-3/+4
	The POST length was clamped with a signed comparison, so a very large Content-Length could turn negative and slip past the limit into the fixed-size buffer.
2026-07-16	Compare repository idle times by sign	Bryce Kwon	-1/+7
	The idle-sort comparator returned a 64-bit time difference truncated to int, which could flip sign and leave the ordering inconsistent.
2026-07-16	Date repositories from HEAD and guard its branch	Bryce Kwon	-2/+27
	The index derived a repository's age from `refs/heads/master` alone, so a repository on any other default branch showed no age. HEAD is repo-controlled and the age stat walks under `refs/heads`, so a branch name carrying a parent-directory component is rejected.
2026-07-16	Respect the cgitrc order of sections	Bryce Kwon	-4/+4
	The default sorted the sections and the repositories within them by name, so the order written in the cgitrc file was ignored.
2026-07-16	Keep snapshots working under a global git config	Bryce Kwon	-1/+7
	cgit unsets HOME to isolate git from the calling user, but git still finds the global config through its getpwuid fallback and then dies expanding a `~` in `core.excludesfile`. That die happened after the snapshot headers and the gzip filter were already in place, so the error page was compressed into the archive and every snapshot came out undecompressable.
2026-07-16	Reject option-like revisions in the log walk	Bryce Kwon	-0/+12
	The log page passed the `id` query parameter to git's revision parser without resolving it and ahead of the end-of-options marker. A value like `id=--output=/path` was then parsed as an option, so an unauthenticated request could create or truncate any file the server user could write. No valid ref or object name begins with a dash.
2026-07-16	Clamp the log offset to bound history walks	Bryce Kwon	-1/+11
	A crafted `ofs` could send cgit walking most of the history for one request.

• [next]