AgeCommit message (Collapse)AuthorLines
Point repo overrides at their global entriesBryce Kwon-15/+5
Leave the filter contracts to the Filter APIBryce Kwon-35/+26
Each global filter entry restated the arguments and the stdin and stdout contract that "Filter API" gives in full. commit-filter and email-filter now name their shipped filters, as the others do.
Describe project-list as the file it namesBryce Kwon-1/+1
Say which versions enable-version-info namesBryce Kwon-2/+2
Only the footer carries the git version. The reason the versions stay out by default is left to MANUAL, which already gives it.
Document virtual-root's default of SCRIPT_NAMEBryce Kwon-3/+3
cgit falls back to SCRIPT_NAME followed by a slash when virtual-root is unset, so its links always take the path form and none take the ?url= form the docs described.
Note that the dumb http transport is a fallbackBryce Kwon-3/+7
Offer the versions as an optionBryce Kwon-0/+8
enable-version-info brings back the cgit and git versions that 872bd7c took off the footer and the generator tag, for a site that wants them, and the version f7d2b83 put on the signature of patches now follows it too. It stays off by default for the reason 872bd7c gave.
Name the page first in every titleBryce Kwon-2/+2
Summary, about, log, refs, tag and stats pages shared one title, so tabs, history and search results could not tell them apart. Titles now read page, repository and site, with root-title as the site, and the description stays in the meta description, where search engines read it.
Load the scripts with deferBryce Kwon-0/+2
A plain script in the head held up parsing until it had downloaded and run, though cgit.js only acts once the document is ready. Deferred scripts still run in the order given and before DOMContentLoaded, so a site script after cgit.js can still call window.cgit.
Escape the same characters in the highlighterBryce Kwon-0/+8
A lexer may hand back the bytes of one separator, or the CR and LF of a line ending, in different tokens, so line endings become line feeds before lexing and the separators are escaped once the tokens are joined.
Read a negative ref count as no limitBryce Kwon-4/+4
summary-branches, summary-tags and max-ref-count already listed every ref at 0, but a negative value reached qsort as a count and crashed the summary and refs pages, and emptied the branch switcher.
Say blame gets the source filter and line numbersBryce Kwon-9/+9
Name every trailer link-trailers.lua linksBryce Kwon-3/+3
Say that js may be given more than onceBryce Kwon-2/+4
Add html serving to the scanned cgitrc trust listBryce Kwon-3/+4
a75603e gated the key and named it under trust-scan-config, but this section kept the list from before.
Describe root-readme as the site's about pageBryce Kwon-13/+15
Say which filters get the repository variablesBryce Kwon-1/+3
Leave readme out of what scan-path fixesBryce Kwon-3/+5
Name the log link that enable-index-links addsBryce Kwon-1/+1
The manual has named the commit page since it was written in 2008, a year after the index started linking the log instead.
Hand the about filter the tree url its links needBryce Kwon-11/+17
With nothing below the about page, a readme's relative links have to be written against the tree, and only cgit knows how this site spells the url of a tree page and which ref the readme was read from. Both reach the filter already escaped for a url, built by the same writer as cgit's own links.
Answer 404 for any path below the about pageBryce Kwon-4/+1
The about page served every file beside the readme as a page of its own, through the about filter, and answered 200 for directories and missing files alike. Images it passed through came from the root of the default branch whatever the readme's own directory and ref. A readme on disk exposed its whole directory this way.
Keep date-format=local-local from failing pagesBryce Kwon-6/+6
The guard took local as a name that may carry the -local suffix, but git reads local only as a whole alias of default-local and dies on anything after it, so that one value turned every page into a 500.
Stop caching clone files and oversized responsesBryce Kwon-2/+11
The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. cache-max-slot-size, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.
Gate html serving behind trust-scan-configBryce Kwon-7/+10
enable-html-serving makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without trust-scan-config and run script against every visitor. The warning for a key read from git config also named a null repository, because repo->path was set only after that file had been read.
Keep the Lua-less build compilingBryce Kwon-1/+2
cgit_abort_filters unhooks the Lua write interposer under NO_LUA too, where neither the hook nor its state exists, so make NO_LUA=1 and the default mode of tools/release-build.sh have not compiled since the die path learned to take stdout back from a filter. The suite now builds and runs that variant as well, and a lua: filter in such a build is refused with a message naming the cause instead of an unknown filter type.
Rename enable-trailers to enable-commit-trailersBryce Kwon-22/+22
Unify the docs, samples and extensionsBryce Kwon-212/+201
Harden the request path, scan and error recoveryBryce Kwon-19/+22
Gate scanned filters with trust-scan-filtersBryce Kwon-26/+25
Apply the mailmap at HEAD to every identBryce Kwon-0/+13
Split trailers out of the commit messageBryce Kwon-0/+38
Trim the comments and dead code across the treeBryce Kwon-2/+2
Convert the manual page to plain MANUAL.txtBryce Kwon-417/+394
Beyond the format change, the documented defaults and inheritance notes now match what the code does.
Document the environment macro expansion readsBryce Kwon-2/+14
Remove the language breakdown from the stats pageBryce Kwon-3/+3
Resolve submodule links from .gitmodulesBryce Kwon-4/+21
Document cache directory ownershipBryce Kwon-1/+10
Cache id-pinned pages and snapshots as staticBryce Kwon-1/+3
Remove the repository homepage featureBryce Kwon-6/+3
Add enable-relative-dates and date-formatBryce Kwon-1/+20
Drop the help tab and its built-in guideBryce Kwon-6/+0
Reorganise the tree into vendor/ and custom/Bryce Kwon-3/+3
Drop the example cgitrc from the manualBryce Kwon-190/+0
Swap the browser markdown renderer for a filterBryce Kwon-13/+6
The readme is now escaped plain text unless about-filter points at the new about-render.lua, which renders markdown, man pages and plain text server-side. The enable-markdown setting goes away with the renderer.
Add max-patch-count to bound the patch viewBryce Kwon-0/+5
Emit a conforming rel=icon for the favicon linkBryce Kwon-3/+4
Gate the stats page and add a language breakdownBryce Kwon-3/+14
The max-stats setting now only bounds the selectable periods and no longer doubles as the enable switch. The tree walk runs before the history walk on purpose. Releasing commit memory while walking history resets each commit slab index, and a commit graph lookup afterwards would read another commit slot and walk the wrong tree. The stats fixture writes a commit graph so the tests cover that path. The history walk bounds the window in process rather than passing a formatted since date to setup_revisions, and parses each commit once.
Remove the owner filter hookBryce Kwon-18/+0
Move syntax highlighting to a Lua source filterBryce Kwon-5/+7
Stat oversized diffs instead of inlining themBryce Kwon-0/+12
Copyright © 2026 Bryce Kwon. All Rights Deprecated.