AgeCommit message (Collapse)AuthorLines
Keep clone files and oversized responses out of the cacheBryce Kwon-2/+11
The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. `cache-max-slot-size`, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.
Gate html serving behind trust-scan-configBryce Kwon-7/+10
`enable-html-serving` makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without `trust-scan-config` and run script against every visitor. The warning for a key read from git config also named a null repository, because `repo->path` was set only after that file had been read.
Keep the Lua-less build compilingBryce Kwon-1/+2
`cgit_abort_filters` unhooks the Lua write interposer under NO_LUA too, where neither the hook nor its state exists, so `make NO_LUA=1` and the default mode of `tools/release-build.sh` have not compiled since the die path learned to take stdout back from a filter. The suite now builds that variant into `build/nolua` and runs it, and a `lua:` filter in such a build is refused with a message naming the cause instead of an unknown filter type.
Rename enable-trailers to enable-commit-trailersBryce Kwon-22/+22
Unify the docs, samples and extensionsBryce Kwon-212/+201
Harden the request path, scan and error recoveryBryce Kwon-19/+22
Gate scanned filters with `trust-scan-filters`Bryce Kwon-26/+25
Apply the mailmap at HEAD to every identBryce Kwon-0/+13
Split trailers out of the commit messageBryce Kwon-0/+38
Trim the comments and dead code across the treeBryce Kwon-2/+2
Convert the manual page to plain `MANUAL.txt`Bryce Kwon-0/+903
Beyond the format change, the documented defaults and inheritance notes now match what the code does.