AgeCommit message (Expand)AuthorLines
End a request quietly when the client has goneBryce Kwon-2/+18
Keep the query string across the about redirectsBryce Kwon-0/+22
Harden the request path, scan and error recoveryBryce Kwon-4/+28
Read every query parameterBryce Kwon-1/+3
Clean up the whole treeBryce Kwon-10/+5
Trim the comments and dead code across the treeBryce Kwon-12/+10
Log scan lock failures that are not contentionBryce Kwon-2/+2
Drop the XHTML slashes and boolean spellingsBryce Kwon-4/+4
Fix ampersand handling in generated urlsBryce Kwon-24/+26
Restyle the sources and fix the audit's findingsBryce Kwon-140/+135
Render each diff body while its file is openBryce Kwon-0/+27
Gather page output into one bufferBryce Kwon-2/+45
Settle the names, types and layout of the sourcesBryce Kwon-3/+3
Point the fork's links and credits at itselfBryce Kwon-1/+1
Reorganize into source, assets and librariesBryce Kwon-0/+0
html: fix handling of null bytePeter Prohaska-1/+1
html: html_ntxt with no ellipsisJeff Smith-21/+11
Simplify http_parse_querystring()Lukas Fleischer-56/+10
ui-shared: prevent malicious filename from injecting headersJason A. Donenfeld-0/+26
html: remove html_status()John Keeping-7/+0
Remove redundant includesJohn Keeping-6/+0
html: avoid using a plain integer as a NULL pointerJohn Keeping-22/+32
html: remove redundant htmlfd variableJohn Keeping-3/+1
Update copyright informationLukas Fleischer-1/+1
html.c: die when write failsJohn Keeping-1/+1
html.c: add various strbuf and varadic helpersJohn Keeping-3/+50
html.c: Replace strdup() with xstrdup()Lukas Fleischer-5/+2
Always #include corresponding .h in .c filesJohn Keeping-0/+1
html: check return value of writeJason A. Donenfeld-2/+3
Mark several functions/variables staticLukas Fleischer-3/+3
White space around control verbs.Jason A. Donenfeld-7/+7
Fix several whitespace errorsLukas Fleischer-39/+39
html.c: avoid out-of-bounds access for url_escape_tableEric Wong-2/+2
Properly escape ampersands inside HTML attributesLukas Fleischer-1/+3
Fix memory leak in http_parse_querystring().Lukas Fleischer-2/+3
Fix escaping of paths with spacesJonathon Mah-4/+6
html.c: add html_intoption()Lars Hjemli-0/+8
do not infloop on a query ending in %XY, for invalid hex X or YJim Meyering-1/+1
html.c: use '+' to escape spaces in urlsLars Hjemli-2/+2
prefer html_raw() to write()Mark Lodato-9/+9
html: fix strcpy bug in convert_query_hexcharMark Lodato-4/+5
html: properly percent-escape URLsMark Lodato-4/+32
html: make all strings 'const char *'Mark Lodato-17/+17
html.c: use correct escaping in html attributesLars Hjemli-2/+4
html.c: add html_url_pathLars Hjemli-0/+16
html.c: add html_url_argLars Hjemli-0/+16
Supply status description to html_status()Lars Hjemli-2/+2
Implement plain viewLars Hjemli-0/+5
Add support for cloning over httpLars Hjemli-0/+7
Print an error if filename is not found in html_include.Harley Laue-1/+5