Age	Commit message (Collapse)	Author	Lines
2026-09-22	Gate html serving behind trust-scan-config	Bryce Kwon	-7/+10
	enable-html-serving makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without trust-scan-config and run script against every visitor. The warning for a key read from git config also named a null repository, because repo->path was set only after that file had been read.
2026-09-22	Keep the Lua-less build compiling	Bryce Kwon	-1/+2
	cgit_abort_filters unhooks the Lua write interposer under NO_LUA too, where neither the hook nor its state exists, so make NO_LUA=1 and the default mode of tools/release-build.sh have not compiled since the die path learned to take stdout back from a filter. The suite now builds and runs that variant as well, and a lua: filter in such a build is refused with a message naming the cause instead of an unknown filter type.
2026-09-21	Rename enable-trailers to enable-commit-trailers	Bryce Kwon	-22/+22
2026-09-15	Unify the docs, samples and extensions	Bryce Kwon	-212/+201
2026-09-14	Harden the request path, scan and error recovery	Bryce Kwon	-19/+22
2026-09-12	Gate scanned filters with trust-scan-filters	Bryce Kwon	-26/+25
2026-09-12	Apply the mailmap at HEAD to every ident	Bryce Kwon	-0/+13
2026-09-12	Split trailers out of the commit message	Bryce Kwon	-0/+38
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-2/+2
2026-09-06	Convert the manual page to plain MANUAL.txt	Bryce Kwon	-417/+394
	Beyond the format change, the documented defaults and inheritance notes now match what the code does.