Age	Commit message (Collapse)	Author	Lines
18 hours	Drop config comments that restate their line	Bryce Kwon	-2/+1
18 hours	Say each routing fact once in the server configs	Bryce Kwon	-3/+3
18 hours	Trim the header notes in the server configs	Bryce Kwon	-7/+2
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
3 days	Pin the server configs to the releases they suit	Bryce Kwon	-0/+2
	Each names the branch it was written for and the release current at its last review, nginx 1.30.6 stable, Apache httpd 2.4.69 and lighttpd 1.4.85, as the projects' own sites listed them on 2026-10-29.
2026-10-01	Mark a page behind an auth filter private	Bryce Kwon	-5/+5
	Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
2026-09-21	Unify the docs, samples and extensions	Bryce Kwon	-5/+4
2026-09-06	Refresh the server configs and drop `unsafe-inline`	Bryce Kwon	-17/+15
	The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy.
2026-08-18	Rework the response headers in the server configs	Bryce Kwon	-8/+38
2026-08-01	Make the server configs complete standalone files	Bryce Kwon	-22/+38
2026-07-25	Reorganize the tree into vendor/ and custom/	Bryce Kwon	-0/+132