Age	Commit message (Collapse)	Author	Lines
22 hours	Read a negative ref count as no limit	Bryce Kwon	-4/+4
	summary-branches, summary-tags and max-ref-count already listed every ref at 0, but a negative value reached qsort as a count and crashed the summary and refs pages, and emptied the branch switcher.
38 hours	Add blame to the source filter and line number docs	Bryce Kwon	-9/+9
38 hours	Name every trailer link-trailers.lua links	Bryce Kwon	-3/+3
38 hours	Say that js may be given more than once	Bryce Kwon	-2/+4
38 hours	Add html serving to the scanned cgitrc trust list	Bryce Kwon	-3/+4
	1456483 gated the key and named it under trust-scan-config, but this section kept the list from before.
38 hours	Describe root-readme as the site's about page	Bryce Kwon	-13/+15
38 hours	Say which filters get the repository variables	Bryce Kwon	-1/+3
38 hours	Leave readme out of what scan-path fixes	Bryce Kwon	-3/+5
38 hours	Name the log link that enable-index-links adds	Bryce Kwon	-1/+1
	The manual has named the commit page since it was written in 2008, a year after the index started linking the log instead.
38 hours	Hand the about filter the tree url its links need	Bryce Kwon	-11/+17
	With nothing below the about page, a readme's relative links have to be written against the tree, and only cgit knows how this site spells the url of a tree page and which ref the readme was read from. Both reach the filter already escaped for a url, built by the same writer as cgit's own links.
38 hours	Answer 404 for any path below the about page	Bryce Kwon	-4/+1
	The about page served every file beside the readme as a page of its own, through the about filter, and answered 200 for directories and missing files alike. Images it passed through came from the root of the default branch whatever the readme's own directory and ref. A readme on disk exposed its whole directory this way.
38 hours	Keep date-format=local-local from failing pages	Bryce Kwon	-6/+6
	The guard took local as a name that may carry the -local suffix, but git reads local only as a whole alias of default-local and dies on anything after it, so that one value turned every page into a 500.
2026-10-01	Keep clone files and oversized responses out of the cache	Bryce Kwon	-2/+11
	The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. `cache-max-slot-size`, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.
2026-10-01	Gate html serving behind trust-scan-config	Bryce Kwon	-7/+10
	`enable-html-serving` makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without `trust-scan-config` and run script against every visitor. The warning for a key read from git config also named a null repository, because `repo->path` was set only after that file had been read.
2026-10-01	Keep the Lua-less build compiling	Bryce Kwon	-1/+2
	`cgit_abort_filters` unhooks the Lua write interposer under NO_LUA too, where neither the hook nor its state exists, so `make NO_LUA=1` and the default mode of `tools/release-build.sh` have not compiled since the die path learned to take stdout back from a filter. The suite now builds that variant into `build/nolua` and runs it, and a `lua:` filter in such a build is refused with a message naming the cause instead of an unknown filter type.
2026-09-27	Rename enable-trailers to enable-commit-trailers	Bryce Kwon	-22/+22
2026-09-21	Unify the docs, samples and extensions	Bryce Kwon	-212/+201
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-19/+22
2026-09-15	Gate scanned filters with `trust-scan-filters`	Bryce Kwon	-26/+25
2026-09-15	Apply the mailmap at HEAD to every ident	Bryce Kwon	-0/+13
2026-09-15	Split trailers out of the commit message	Bryce Kwon	-0/+38
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-2/+2
2026-09-06	Convert the manual page to plain `MANUAL.txt`	Bryce Kwon	-0/+903
	Beyond the format change, the documented defaults and inheritance notes now match what the code does.