Age	Commit message (Collapse)	Author	Lines
13 hours	Strip control characters from the location alone	Bryce Kwon	-20/+12
	set_cookie only ever writes an empty value or a token secure_value built from url-encoded text, digits and hex, so stripping it changed nothing.
13 hours	Drop the URL helpers' guards that cannot fire	Bryce Kwon	-18/+2
	Every caller hands the helpers a string, and a value with a line break is refused by validate_value whether or not CR LF is folded on the way.
13 hours	Keep only the request fields the auth filters read	Bryce Kwon	-42/+10
	Seven of the twelve fields filter_open stored were never read. Naming all twelve parameters keeps the order cgit passes them in on record.
13 hours	Take a signed cookie apart with one match	Bryce Kwon	-82/+11
	The loop let a valid cookie through with a field appended, a doubled separator or a zero in front of its expiry. The payload now carries the expiry as written, so only the spelling secure_value issues verifies.
13 hours	Drop a highlighter check that tested the harness	Bryce Kwon	-6/+0
	The filter hands a NUL through untouched, and only the harness's copy of cgit's sink cut the text there, so the check would have failed the day the filter replaced NULs the way about-render does.
13 hours	Drop the highlighter's extension fallback	Bryce Kwon	-61/+13
	The table of extensions and the second lookup served only a Scintillua with no detect(), which now leaves every file uncoloured but escaped. The fake detect() names a lexer after the file's suffix, so every test lexer is reached through it.
13 hours	Call string.match like the rest of the highlighter	Bryce Kwon	-1/+1
13 hours	Drop a stray blank line from the about-render tests	Bryce Kwon	-1/+0
13 hours	Carry a man page's text as plain strings	Bryce Kwon	-23/+16
	lpeg's constant, query and numbered captures already do what the token helpers did, and nothing ever read the tokens of an escape that draws nothing.
13 hours	Take a no fill line's plain text from its nodes	Bryce Kwon	-7/+1
13 hours	Wrap a man page's font runs with the macros' helper	Bryce Kwon	-27/+11
13 hours	Reuse the digit pattern where it is spelt out	Bryce Kwon	-2/+2
13 hours	Build the block start test from the line grammars	Bryce Kwon	-2/+1
13 hours	Count a rule among the blocks that end a paragraph	Bryce Kwon	-7/+4
13 hours	Inline the list check before indented code	Bryce Kwon	-6/+2
13 hours	Read a setext heading's level off its capture	Bryce Kwon	-10/+4
13 hours	Build every code block in one place	Bryce Kwon	-17/+11
13 hours	Replace a readme's NUL bytes in one substitution	Bryce Kwon	-19/+3
13 hours	Let the dispatch serve markdown without lpeg	Bryce Kwon	-5/+0
	Without lpeg both renderers stay nil, and the handler lookup already falls back to plain text for a format it has no renderer for.
13 hours	Render markdown and man pages through one function	Bryce Kwon	-28/+18
	Everything that can raise already runs inside the parse and emit pcalls, so the outer one in filter_close could only ever have sent the page a second time. The size check moves to the dispatch with it.
13 hours	Drop three needless forward declarations	Bryce Kwon	-9/+3
13 hours	Drop fallbacks for a match that cannot fail	Bryce Kwon	-3/+3
	A table capture of a pattern repeated zero or more times matches every string, the empty one included, so the inline grammars never return nil.
13 hours	Drop the readme hooks that nothing reads	Bryce Kwon	-20/+12
	Nothing in assets/ or in README's list of hooks reads a fenced block's data-lang or the manpage class on a man page's wrapper, so the header now names the two wrappers the stylesheet does style.
13 hours	Declare the repository variables' struct in place	Bryce Kwon	-6/+4
13 hours	Build cgit_ensure_end's copy in one expression	Bryce Kwon	-9/+1
13 hours	Leave the zeroed repository fields to the memset	Bryce Kwon	-3/+0
13 hours	Grow the repository and ref lists with ALLOC_GROW	Bryce Kwon	-24/+6
13 hours	Join a diff line's pieces within one call	Bryce Kwon	-32/+8
	Xdiff hands out_line a whole line each time, as the prefix, the record and any no-newline marker, and the fragment was already flushed before the call returned, so nothing ever carried over to the next call.
13 hours	Cut two comments that repeat the header or a name	Bryce Kwon	-5/+3
13 hours	Explain the encoded ampersand and plus at the table	Bryce Kwon	-6/+5
13 hours	Map the markup characters to entities in one place	Bryce Kwon	-28/+34
13 hours	Keep the permission triplet beside its one caller	Bryce Kwon	-13/+8
13 hours	Keep the clone row and title docs in the header	Bryce Kwon	-11/+15
13 hours	Keep three helpers beside their only callers	Bryce Kwon	-62/+62
13 hours	Build cgit_date_mode's result on the stack	Bryce Kwon	-2/+1
13 hours	Write the meta description in one place	Bryce Kwon	-6/+4
13 hours	Read a title's path from the end with strrchr	Bryce Kwon	-20/+7
13 hours	Trim trailing slashes with git's strbuf helper	Bryce Kwon	-12/+4
13 hours	Build the full current url from the current url	Bryce Kwon	-8/+3
13 hours	Fold the va_list error page into its one caller	Bryce Kwon	-13/+4
13 hours	Ask head_is_named before carrying the branch	Bryce Kwon	-1/+1
13 hours	Let self_link's fallback be a plain reporevlink	Bryce Kwon	-8/+2
13 hours	Escape a submodule link's class like the others	Bryce Kwon	-6/+6
13 hours	Open site and repository links through one helper	Bryce Kwon	-24/+17
13 hours	Write each query argument through one helper	Bryce Kwon	-49/+30
13 hours	Return repolink's delimiter without copying it	Bryce Kwon	-1/+1
13 hours	Drop the query-string form of every link	Bryce Kwon	-86/+31
	cgit falls back to SCRIPT_NAME for virtual_root whenever cgitrc leaves it out, so the ?url= and ?r= forms only ever reached an error page raised while cgitrc was still being read. The page argument of cgit_add_hidden_formfields fed only the url field, so it is unused until its callers stop passing it.
13 hours	Stop leaking the host on an embedded page	Bryce Kwon	-3/+3
13 hours	Stop leaking the short hash of an object link	Bryce Kwon	-7/+4
13 hours	Trim a snapshot name without reading out of bounds	Bryce Kwon	-29/+42
	For a url of .git, or an empty one, repo_basename stepped its index to the byte before its buffer, read it, and would have cleared it had it held a slash. Git's strbuf trims take the same steps safely, and they lift the 1024-byte cap that failed the page for a longer url.