| Age | Commit message (Collapse) | Author | Lines |
|---|---|---|---|
| Replace the browser markdown renderer with a filter | Bryce Kwon | -3/+0 | |
| The readme is now escaped plain text unless `about-filter` points at the new `about-render.lua`, which renders markdown, man pages and plain text server-side. `enable-markdown` goes away with the renderer. | |||
| Add `max-patch-count` to bound the patch view | Bryce Kwon | -0/+3 | |
| Gate the stats page and add a language breakdown | Bryce Kwon | -0/+6 | |
| `max-stats` only bounds the selectable periods now and no longer doubles as the enable switch. The tree walk runs before the history walk on purpose. Releasing commit memory while walking history resets each commit slab index, and a commit graph lookup afterwards would read another commit slot and walk the wrong tree. The stats fixture writes a commit graph so the tests cover that path. The history walk bounds the window in process rather than passing a formatted since date to `setup_revisions`, and parses each commit once. | |||
| Remove the owner filter hook | Bryce Kwon | -6/+0 | |
| Stat oversized diffs instead of inlining them | Bryce Kwon | -0/+6 | |
| Cap and paginate the ref listings | Bryce Kwon | -0/+3 | |
| Add a help page with common workflows | Bryce Kwon | -0/+3 | |
| Point the fork's links and credits at itself | Bryce Kwon | -2/+2 | |
| AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork. | |||
| Drop unused config and query fields | Bryce Kwon | -4/+0 | |
| Key the cache on scheme and host | Bryce Kwon | -2/+15 | |
| Clone urls and atom links are built from the request scheme and Host, but the cache key left them out, so a request with a spoofed Host could cache a page carrying a bogus clone url and serve it to other visitors. | |||
| Bound the authenticate-post length safely | Bryce Kwon | -3/+4 | |
| The POST length was clamped with a signed comparison, so a very large Content-Length could turn negative and slip past the limit into the fixed-size buffer. | |||
| Respect the cgitrc order of sections | Bryce Kwon | -1/+1 | |
| The default sorted the sections and the repositories within them by name, so the order written in the cgitrc file was ignored. | |||
| Keep snapshots working under a global git config | Bryce Kwon | -1/+7 | |
| cgit unsets HOME to isolate git from the calling user, but git still finds the global config through its getpwuid fallback and then dies expanding a `~` in `core.excludesfile`. That die happened after the snapshot headers and the gzip filter were already in place, so the error page was compressed into the archive and every snapshot came out undecompressable. | |||
| Clamp the log offset to bound history walks | Bryce Kwon | -1/+11 | |
| A crafted `ofs` could send cgit walking most of the history for one request. | |||
| Check `max-blob-size` before reading, default 10 MB | Bryce Kwon | -1/+1 | |
| Only the tree view honoured the limit, and only after loading the whole object. The raw blob, plain, blame and readme paths now check the size before reading, and the default moves from unlimited to 10 MB so a fresh install never buffers a huge object whole, with zero still the opt-out. | |||
| Render README markdown in the browser | Bryce Kwon | -0/+3 | |
| cgit had no markdown support of its own, so a readme was rendered through an external python filter or not at all. Escaping the source and formatting it in cgit.js keeps the work in the browser like the blob highlighter, and the page stays readable as plain text without scripting. | |||
| Add `enable-tree-group-dirs` to list dirs first | Bryce Kwon | -0/+2 | |
| Gate the cache listing behind `enable-cache-list` | Bryce Kwon | -0/+2 | |
| The `ls_cache` page printed the cache directory path and the urls other visitors had requested, with no gate at all. | |||
| Reorganize into source, assets and libraries | Bryce Kwon | -0/+0 | |
| The C sources move to source/, the served files to assets/, the bundled Git submodule to libraries/git and the filter scripts to extensions/. Everything the build generates now lands in build/, so a clean is a single remove and the tree stays clean. | |||
| cgit: truncate all config values at the newline | Jason A. Donenfeld | -50/+40 | |
| These would be largely invalid anyway (save, I suppose, for Linux file paths that technically can contain new lines). The actual problem is that these get printed back out into cached -- and trusted -- cgitrc files, and if the fields have newlines, the git-config way of less trusted users configuring repos on a shared system can be abused to inject newlines, which then can be used to smuggle global options (including filters, which execute code) into the cached cgitrc. So now, only ever duplicate up to the newline, when dealing with these inputs. Reported-by: Adrian Denkiewicz <adrian@doyensec.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| cgit: use strchrnul instead of open coding | Jason A. Donenfeld | -3/+1 | |
| Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| cgit: devirtualize repo_config | Jason A. Donenfeld | -10/+9 | |
| There's no reason to pass around function pointers. It was never used for anything beyond one function. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| cgit: override die routine globally | Jason A. Donenfeld | -0/+7 | |
| We don't get any return value from compile_grep_patterns calling compile_regexp_failed, causing the default die routine to print to stderr and then for cgit to exit ungracefully. Instead override the default die routine to show a normal error page. Perhaps compile_grep_patterns ought to change upstream to return an error. But this commit here will handle future issues as well, so perhaps not a bad idea to do anyway. Link: https://lists.zx2c4.com/pipermail/cgit/2026-March/004982.html Link: https://lists.zx2c4.com/pipermail/cgit/2026-March/004983.html Reported-by: Adrian C. <anrxc@sysphere.org> Reported-by: Aiden Woodruff <aiden@aidenw.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| ui-log: allow link following to be disabled per-repo | Jason A. Donenfeld | -0/+4 | |
| This exists for other CPU heavy operations like blame, but doesn't for the follow functionality. Add it for that. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| git: update to v2.53.0 | Christian Hesse | -4/+3 | |
| Update to git version v2.53.0, this requires changes for these upstream commits: * bdbebe5714b25dc9d215b48efbb80f410925d7dd refs: introduce wrapper struct for `each_ref_fn` * 589127caa73090040200989ff4d24c3d54f473f2 packfile: move list of packs into the packfile store * 5a5c7359f77ecd1bc4b0e172563161d602f131d3 refs: drop `current_ref_iter` hack * b6e4cc8c32850315323961659e553d1d14591f7f tag: support arbitrary repositories in parse_tag() * 84f0e60b28de69d1ccb7a51b729af6202b6cf4c8 packfile: move packfile store into object source Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.47.0 | Christian Hesse | -2/+2 | |
| Update to git version v2.47.0, this requires changes for these upstream commits: * e8207717f1623325fe1c95338fb03c1104ed5687 refs: add referent to each_ref_fn Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.46.0 | Christian Hesse | -2/+6 | |
| Update to git version v2.46.0, this requires changes for these upstream commits: * e7da9385708accf518a80a1e17969020fb361048 global: introduce `USE_THE_REPOSITORY_VARIABLE` macro * 9da95bda74cf10e1475384a71fd20914c3b99784 hash: require hash algorithm in `oidread()` and `oidclr()` * 30aaff437fddd889ba429b50b96ea4c151c502c5 refs: pass repo when peeling objects * c8f815c2083c4b340d4148a15d45c55f2fcc7d3f refs: remove functions without ref store Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.41.0 | Christian Hesse | -1/+1 | |
| Update to git version v2.41.0, with lots of changes... This requires changes for these upstream commits: * 60ff56f50372c1498718938ef504e744fe011ffb banned.h: mark `strtok()` and `strtok_r()` as banned * 52acddf36c8cb3778ab2098a0d95cc2e375a4069 string-list: multi-delimiter `string_list_split_in_place()` * d850b7a545fcfbd97460a921c7f7c59d933eb0f7 cocci: apply the "cache.h" part of "the_repository.pending" * cb338c23d6d518947bf6f7240bf30e2ec232bd3b cocci: apply the "commit-reach.h" part of "the_repository.pending" * ecb5091fd4301ac647db0bd2504112b38f7ee06d cocci: apply the "commit.h" part of "the_repository.pending" * 085390328f5fe1dfba67039b1fd6cc51546a4e41 cocci: apply the "diff.h" part of "the_repository.pending" * bc726bd075929aab6b3e09d4dd5c2b0726fd5350 cocci: apply the "object-store.h" part of "the_repository.pending" * bab821646a74c446370fa8d01ca851f247df5033 cocci: apply the "pretty.h" part of "the_repository.pending" * afe27c889429438829bc8818ed17e4960bd3ef02 cocci: apply the "packfile.h" part of "the_repository.pending" * 12cb1c10a64170a5d600dd1c6c8abfeec105fb6b cocci: apply the "refs.h" part of "the_repository.pending" * 035c7de9e9ea11d26df5f9e4bb117f91ed11a9fd cocci: apply the "revision.h" part of "the_repository.pending" ... and some more I missed to list 😜 - for example the move and cleanup of headers and includes (see changes in `cgit.h`) comes to mind... Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| config: add js | Andy Green | -0/+2 | |
| Just like the config allows setting css URL path, add a config for setting the js URL path Signed-off-by: Andy Green <andy@warmcat.com> Reviewed-by: John Keeping <john@keeping.me.uk> Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| css: change to be a list | Andy Green | -2/+1 | |
| Without changing the default behaviour of including /cgit.css if nothing declared, allow the "css" config to be given multiple times listing one or more alternative URL paths to be included in the document head area. Signed-off-by: Andy Green <andy@warmcat.com> Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| cgitrc: handle value "0" for max-repo-count | Christian Hesse | -2/+4 | |
| Setting max-repo-count to "0" makes cgit loop forever generating page links. Make this a special value to show all repositories. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| about: allow to give head from query | Christian Hesse | -3/+5 | |
| Reading the README from repository used to be limited to default branch or a branch given in configuration. Let's allow a branch from query if not specified explicitly. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.34.0 | Christian Hesse | -1/+1 | |
| Update to git version v2.34.0, this requires changes for these upstream commits: * abf897bacd2d36b9dbd07c70b4a2f97a084704ee string-list.[ch]: remove string_list_init() compatibility function Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| global: replace references to 'sha1' with 'oid' | Christian Hesse | -8/+8 | |
| For some time now sha1 is considered broken and upstream is working to replace it with sha256. Replace all references to 'sha1' with 'oid', just as upstream does. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.25.0 | Christian Hesse | -1/+1 | |
| Update to git version v2.25.0. Upstream renamed 'init_display_notes()' to 'load_display_notes()' in commit 1e6ed5441a61b5085978e0429691e2e2425f6846 ("notes: rename to load_display_notes()"). Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| git: update to v2.22.0 | Christian Hesse | -6/+11 | |
| Update to git version v2.22.0. Upstream commit bce9db6d ("trace2: use system/global config for default trace2 settings") caused a regression. We have to unset HOME and XDG_CONFIG_HOME before early loading of config from trace2 code kicks in. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| ui-tree: allow per repository override for enable-blame | Christian Hesse | -0/+4 | |
| The blame operation can cause high cost in terms of CPU load for huge repositories. Let's add a per repository override for enable-blame. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| auth-filter: pass url with query string attached | Jason A. Donenfeld | -1/+1 | |
| Otherwise redirections come out wrong. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| config: record repo.snapshot-prefix in the per-repo config | Konstantin Ryabitsev | -0/+2 | |
| Even if we find snapshot-prefix in the repo configuration, we are not writing it out into the rc- file, so setting the value does not have any effect. Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org> | |||
| auth-filter: do not write more than we've read | Jason A. Donenfeld | -2/+2 | |
| Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| extra-head-content: introduce another option for meta tags | Jason A. Donenfeld | -0/+4 | |
| This is to support things like go-import meta tags, which are on a per-repo basis. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| Use string list strdup_strings for mimetypes | John Keeping | -2/+2 | |
| There's no need to do this manually with the string list API will do it for us. Signed-off-by: John Keeping <john@keeping.me.uk> | |||
| global: remove functionality we deprecated for cgit v1.0 | Christian Hesse | -14/+3 | |
| The man page states these were deprecated for v1.0. We are past v1.1, so remove the functionality. Signed-off-by: Christian Hesse <mail@eworm.de> Reviewed-by: John Keeping <john@keeping.me.uk> | |||
| snapshot: strip bit from struct cgit_snapshot_format | Christian Hesse | -1/+1 | |
| We had a static bit value in struct cgit_snapshot_format. We do not rely on it and things can be calculated on the fly. So strip it. Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| Add "snapshot-prefix" repo configuration | John Keeping | -0/+2 | |
| Allow using a user-specified value for the prefix in snapshot files instead of the repository basename. For example, files downloaded from the linux-stable.git repository should be named linux-$VERSION and not linux-stable-$VERSION, which can be achieved by setting: repo.snapshot-prefix=linux Signed-off-by: John Keeping <john@keeping.me.uk> Reviewed-by: Christian Hesse <mail@eworm.de> | |||
| cgit: prepare repo before error pages | Jason A. Donenfeld | -7/+12 | |
| This fixes a crash when showing a list of all heads in the <select> box in the header. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |||
| git: update to v2.16.0 | Christian Hesse | -1/+1 | |
| Update to git version v2.16.0: * refs: convert resolve_ref_unsafe to struct object_id (49e61479be913f67e66bb3fdf8de9475c41b58bd) * diff: remove DIFF_OPT_SET macro (23dcf77f48feb49c54bad09210f093a799816334) * log: add option to choose which refs to decorate (65516f586b69307f977cd67cc45513a296cabc25) * diff: convert flags to be stored in bitfields (02f2f56bc377c287c411947d0e1482aac888f8db) Signed-off-by: Christian Hesse <mail@eworm.de> | |||
| ui-blame: add blame UI | Jeff Smith | -0/+2 | |
| Implement a page which provides the blame view of a specified file. This feature is controlled by a new config variable, "enable-blame", which is disabled by default. Signed-off-by: Jeff Smith <whydoubt@gmail.com> Reviewed-by: John Keeping <john@keeping.me.uk> | |||
| cgit: don't set vpath unless repo is set | John Keeping | -6/+6 | |
| After the previous two patches, this can be classified as a tidy up rather than a bug fix, but I think it makes sense to group all of the tests together before setting up the environment for the command to execute. Signed-off-by: John Keeping <john@keeping.me.uk> | |||
| Use skip_prefix() to get rid of magic constants | Lukas Fleischer | -26/+30 | |
| Signed-off-by: Lukas Fleischer <lfleischer@lfos.de> | |||
index : cgit
Hyperfast and read-only web frontend for git repositories
Bryce Kwon