| Age | Commit message (Expand) | Author | Lines |
| Claim and test Lua 5.5 for every extension | Bryce Kwon | -3/+3 |
| Say that a protected repository stays on the index | Bryce Kwon | -0/+4 |
| Name the auth cookie __Host- where it can be | Bryce Kwon | -2/+10 |
| End a session when its account's hash changes | Bryce Kwon | -29/+44 |
| Load auth libraries only when a request needs one | Bryce Kwon | -6/+10 |
| Say which hash kinds each system's crypt checks | Bryce Kwon | -2/+14 |
| Spend a missing account's login on a real hash | Bryce Kwon | -12/+17 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -1/+5 |
| Read the auth cookie in linear time | Bryce Kwon | -9/+21 |
| Refuse every repository when auth-file loses repos | Bryce Kwon | -11/+14 |
| Unify the docs, samples and extensions | Bryce Kwon | -1/+1 |
| Clean up the whole tree | Bryce Kwon | -22/+11 |
| Give the login inputs explicit field types | Bryce Kwon | -1/+1 |
| Trim the comments and dead code across the tree | Bryce Kwon | -44/+29 |
| Let password managers fill the login form | Bryce Kwon | -4/+4 |
| Restyle the filter extension headers and markup | Bryce Kwon | -158/+183 |
| Move the cookie-signing secret out of the cachev2.3.0 | Bryce Kwon | -1/+1 |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -29/+2 |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -2/+16 |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+556 |