AgeCommit message (Collapse)AuthorLines
Pin the server configs to the releases they suitBryce Kwon-1/+3
Each names the branch it was written for and the release current at its last review, nginx 1.30.6 stable, Apache httpd 2.4.69 and lighttpd 1.4.85, as the projects' own sites listed them on 2026-10-29.
Mark a page behind an auth filter privateBryce Kwon-5/+5
Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
Unify the docs, samples and extensionsBryce Kwon-5/+4
Refresh the server configs and drop `unsafe-inline`Bryce Kwon-34/+26
The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy.
Rework the response headers in the server configsBryce Kwon-11/+49
Drop the Last-Modified, Expires and ETag headersBryce Kwon-1/+5
Make the server configs complete standalone filesBryce Kwon-55/+157
Reorganize the tree into vendor/ and custom/Bryce Kwon-0/+152