| Age | Commit message (Collapse) | Author | Lines |
|---|---|---|---|
| Mark a page behind an auth filter private | Bryce Kwon | -14/+15 | |
| Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in. | |||
| Keep clone files and oversized responses out of the cache | Bryce Kwon | -0/+5 | |
| The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. `cache-max-slot-size`, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced. | |||
| Gate html serving behind trust-scan-config | Bryce Kwon | -3/+3 | |
| `enable-html-serving` makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without `trust-scan-config` and run script against every visitor. The warning for a key read from git config also named a null repository, because `repo->path` was set only after that file had been read. | |||
| Rename enable-trailers to enable-commit-trailers | Bryce Kwon | -11/+12 | |
| Unify the docs, samples and extensions | Bryce Kwon | -207/+236 | |
| Harden the request path, scan and error recovery | Bryce Kwon | -6/+6 | |
| Gate scanned filters with `trust-scan-filters` | Bryce Kwon | -18/+16 | |
| Apply the mailmap at HEAD to every ident | Bryce Kwon | -0/+9 | |
| Add the link-trailers extension | Bryce Kwon | -0/+109 | |
| Split trailers out of the commit message | Bryce Kwon | -0/+19 | |
| Clean up the whole tree | Bryce Kwon | -84/+43 | |
| Give the login inputs explicit field types | Bryce Kwon | -2/+2 | |
| Refresh the server configs and drop `unsafe-inline` | Bryce Kwon | -94/+71 | |
| The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy. | |||
| Trim the comments and dead code across the tree | Bryce Kwon | -297/+203 | |
| Rename the inconsistent config keys | Bryce Kwon | -120/+129 | |
| noplainemail enable-plain-email noheader enable-header cache-root-ttl cache-index-ttl cache-repo-ttl cache-summary-ttl cache-scanrc-ttl cache-scan-ttl agefile age-file renamelimit rename-limit extra-head-content head-content | |||
| Remove the language breakdown from the stats page | Bryce Kwon | -2/+2 | |
| Replace `nbsp` spacing with CSS | Bryce Kwon | -4/+4 | |
| Document cache directory ownership | Bryce Kwon | -1/+3 | |
| Refuse unknown and spoofed hostnames in nginx.conf | Bryce Kwon | -0/+31 | |
| Rework the response headers in the server configs | Bryce Kwon | -30/+132 | |
| Drop the Last-Modified, Expires and ETag headers | Bryce Kwon | -1/+11 | |
| Drop the update-server-info hook | Bryce Kwon | -25/+0 | |
| Rename the agefile hook to `cgit-age` | Bryce Kwon | -0/+0 | |
| Let password managers fill the login form | Bryce Kwon | -8/+8 | |
| Lazy load the avatar icons | Bryce Kwon | -2/+10 | |
| Restyle the filter extension headers and markup | Bryce Kwon | -845/+917 | |
| Remove the repository homepage feature | Bryce Kwon | -3/+0 | |
| Move the cookie-signing secret out of the cachev2.3.0 | Bryce Kwon | -2/+2 | |
| Trim the lua headers and fix the Scintillua notes | Bryce Kwon | -104/+18 | |
| Fix cookie name escaping and stored hash trimming | Bryce Kwon | -3/+26 | |
| Make the server configs complete standalone files | Bryce Kwon | -204/+395 | |
| Add a hook that clears cgit's cache on push | Bryce Kwon | -0/+38 | |
| Set a readable umask in the post-update hook | Bryce Kwon | -0/+7 | |
| Rewrite the agefile hook for reliability | Bryce Kwon | -6/+25 | |
| Add `enable-relative-dates` and `date-format` | Bryce Kwon | -0/+9 | |
| Drop the help tab and its built-in guide | Bryce Kwon | -4/+0 | |
| Reorganize the tree into vendor/ and custom/ | Bryce Kwon | -0/+3416 | |
index : cgit
Hyperfast and read-only web frontend for git repositories
Bryce Kwon