Age	Commit message (Collapse)	Author	Lines
11 hours	Find a capitalised extension's lexer again	Bryce Kwon	-2/+4
	Scintillua's detect() matches an extension by its case, and the fallback e1960f0 dropped had lowercased it, so MAIN.C and SETUP.PY lost their colour. The fake lexer now answers only for the suffixes it knows, as Scintillua does, which is what lets the check see it.
11 hours	Describe a negative section-from-path in cgitrc	Bryce Kwon	-2/+3
11 hours	Spell url in the Lua comments as the docs do	Bryce Kwon	-16/+16
11 hours	Say cgit pages carry no expiry, not no headers	Bryce Kwon	-3/+3
	Behind an auth filter every page carries Cache-Control: private and the login page no-store, so only the missing expiry holds on every site.
11 hours	Correct two fallbacks the sample config states	Bryce Kwon	-3/+3
	cgit_snapshot_prefix falls back to the basename of the repository url, and print_object sends a binary blob as application/octet-stream.
11 hours	Name the pages the highlighter runs on	Bryce Kwon	-1/+1
11 hours	Point the source-filter sample at its notes	Bryce Kwon	-3/+2
11 hours	Write five compound terms one way in the docs	Bryce Kwon	-2/+2
	Each takes the form its option name or most of the prose already uses, as in case-sensitive-sort and side-by-side-diffs.
11 hours	Spell HTML in capitals as most of the docs do	Bryce Kwon	-1/+1
	The head section loses its capitals too, since HEAD elsewhere in the manual is git's.
11 hours	Spell url the way the tree mostly does	Bryce Kwon	-14/+14
	Names keep their own spelling, so the URL trailer and CGIT_REPO_URL stay in capitals.
12 hours	Spell non-zero the way the tree does	Bryce Kwon	-3/+3
12 hours	Say the highlighter needs Scintillua's detect()	Bryce Kwon	-1/+2
12 hours	Catch a lexer's failure in one place	Bryce Kwon	-12/+9
	filter_close already runs highlight under pcall and serves the escaped text when it fails, so the pcalls around detect, load and lex inside it only turned a raise into the same fallback a step earlier.
12 hours	Write a session's expiry in whole seconds	Bryce Kwon	-0/+10
	On Lua 5.3 and later a length worked out with a fraction, such as 1.5 * 24 * 60 * 60, is a float, so the signed expiry came out as 1793609024.0, which validate_value refuses, and every login failed. Max-Age took the same .0, which makes a browser ignore it.
12 hours	Collect an email filter's writes like the others	Bryce Kwon	-10/+12
12 hours	Say what really differs between the auth filters	Bryce Kwon	-6/+8
	The lookups were never the only difference, since the configuration and trim's place differ as well. The configuration is now set off by blank lines, as in the other extensions, instead of a heading.
12 hours	Drop auth guards for input cgit never sends	Bryce Kwon	-18/+6
	cgit names no repository with an empty string, never nil, so the check that the index stays up proved nothing, and auth-file in fact refuses the index too while its repos file cannot be read. A session_seconds of 0 signs a session that has expired by the time it comes back, so it needs no branch of its own in set_cookie.
12 hours	Strip control characters from the location alone	Bryce Kwon	-18/+12
	set_cookie only ever writes an empty value or a token secure_value built from url-encoded text, digits and hex, so stripping it changed nothing.
12 hours	Drop the URL helpers' guards that cannot fire	Bryce Kwon	-18/+2
	Every caller hands the helpers a string, and a value with a line break is refused by validate_value whether or not CR LF is folded on the way.
12 hours	Keep only the request fields the auth filters read	Bryce Kwon	-42/+10
	Seven of the twelve fields filter_open stored were never read. Naming all twelve parameters keeps the order cgit passes them in on record.
12 hours	Take a signed cookie apart with one match	Bryce Kwon	-82/+10
	The loop let a valid cookie through with a field appended, a doubled separator or a zero in front of its expiry. The payload now carries the expiry as written, so only the spelling secure_value issues verifies.
12 hours	Drop the highlighter's extension fallback	Bryce Kwon	-47/+8
	The table of extensions and the second lookup served only a Scintillua with no detect(), which now leaves every file uncoloured but escaped. The fake detect() names a lexer after the file's suffix, so every test lexer is reached through it.
12 hours	Call string.match like the rest of the highlighter	Bryce Kwon	-1/+1
12 hours	Carry a man page's text as plain strings	Bryce Kwon	-23/+16
	lpeg's constant, query and numbered captures already do what the token helpers did, and nothing ever read the tokens of an escape that draws nothing.
12 hours	Take a no fill line's plain text from its nodes	Bryce Kwon	-7/+1
12 hours	Wrap a man page's font runs with the macros' helper	Bryce Kwon	-27/+11
12 hours	Reuse the digit pattern where it is spelt out	Bryce Kwon	-2/+2
12 hours	Build the block start test from the line grammars	Bryce Kwon	-2/+1
12 hours	Count a rule among the blocks that end a paragraph	Bryce Kwon	-7/+4
12 hours	Inline the list check before indented code	Bryce Kwon	-6/+2
12 hours	Read a setext heading's level off its capture	Bryce Kwon	-10/+4
12 hours	Build every code block in one place	Bryce Kwon	-17/+11
12 hours	Replace a readme's NUL bytes in one substitution	Bryce Kwon	-19/+3
12 hours	Let the dispatch serve markdown without lpeg	Bryce Kwon	-5/+0
	Without lpeg both renderers stay nil, and the handler lookup already falls back to plain text for a format it has no renderer for.
12 hours	Render markdown and man pages through one function	Bryce Kwon	-28/+18
	Everything that can raise already runs inside the parse and emit pcalls, so the outer one in filter_close could only ever have sent the page a second time. The size check moves to the dispatch with it.
12 hours	Drop three needless forward declarations	Bryce Kwon	-9/+3
12 hours	Drop fallbacks for a match that cannot fail	Bryce Kwon	-3/+3
	A table capture of a pattern repeated zero or more times matches every string, the empty one included, so the inline grammars never return nil.
12 hours	Drop the readme hooks that nothing reads	Bryce Kwon	-14/+7
	Nothing in assets/ or in README's list of hooks reads a fenced block's data-lang or the manpage class on a man page's wrapper, so the header now names the two wrappers the stylesheet does style.
13 hours	Rewrap the max-ref-count comment	Bryce Kwon	-2/+1
13 hours	Spell customisation and uncoloured the British way	Bryce Kwon	-1/+2
13 hours	Point each hook at the other hooks here	Bryce Kwon	-3/+6
	The cache hook named only the age-file hook, from before the commit-graph hook came.
13 hours	Drop config comments that restate their line	Bryce Kwon	-7/+2
13 hours	Say each routing fact once in the server configs	Bryce Kwon	-20/+16
13 hours	Leave the filter prefixes to the filter preamble	Bryce Kwon	-12/+7
	The preamble above the filters explains lua: and exec:, and the repo.* filter entries already read "Value is a command."
13 hours	Say minutes once in the cache ttl comments	Bryce Kwon	-12/+9
13 hours	Drop the filter note from the cgitrc header	Bryce Kwon	-4/+0
	The filter section names about-render.lua and the source-filter itself.
13 hours	Name the guarded settings in one place	Bryce Kwon	-5/+4
13 hours	Trim the header notes in the server configs	Bryce Kwon	-23/+7
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
13 hours	Say each css and js line holds one url	Bryce Kwon	-3/+3
13 hours	Drop the snapshot format from the query comment	Bryce Kwon	-1/+1
	A snapshot's format comes from the suffix of its filename in the path, not from the query string.