| Age | Commit message (Expand) | Author | Lines |
|---|
| Keep every control byte out of a header value | Bryce Kwon | -0/+4 |
| Cut text between characters, never inside one | Bryce Kwon | -0/+6 |
| Encode repository urls and the feed branch | Bryce Kwon | -0/+12 |
| Read and write slot keys and pages in full | Bryce Kwon | -1/+5 |
| Keep the error of a request that dies mid capture | Bryce Kwon | -0/+1 |
| End a request quietly when the client has gone | Bryce Kwon | -2/+18 |
| Keep the query string across the about redirects | Bryce Kwon | -0/+22 |
| Harden the request path, scan and error recovery | Bryce Kwon | -4/+28 |
| Read every query parameter | Bryce Kwon | -1/+3 |
| Clean up the whole tree | Bryce Kwon | -10/+5 |
| Trim the comments and dead code across the tree | Bryce Kwon | -12/+10 |
| Log scan lock failures that are not contention | Bryce Kwon | -2/+2 |
| Drop the XHTML slashes and boolean spellings | Bryce Kwon | -4/+4 |
| Fix ampersand handling in generated urls | Bryce Kwon | -24/+26 |
| Restyle the sources and fix the audit's findings | Bryce Kwon | -141/+136 |
| Render each diff body while its file is open | Bryce Kwon | -0/+27 |
| Gather page output into one buffer | Bryce Kwon | -2/+45 |
| Settle the names, types and layout of the sources | Bryce Kwon | -3/+3 |
| Point the fork's links and credits at itself | Bryce Kwon | -1/+1 |
| Reorganize into source, assets and libraries | Bryce Kwon | -0/+0 |
| html: fix handling of null byte | Peter Prohaska | -1/+1 |
| html: html_ntxt with no ellipsis | Jeff Smith | -21/+11 |
| Simplify http_parse_querystring() | Lukas Fleischer | -56/+10 |
| ui-shared: prevent malicious filename from injecting headers | Jason A. Donenfeld | -0/+26 |
| html: remove html_status() | John Keeping | -7/+0 |
| Remove redundant includes | John Keeping | -6/+0 |
| html: avoid using a plain integer as a NULL pointer | John Keeping | -22/+32 |
| html: remove redundant htmlfd variable | John Keeping | -3/+1 |
| Update copyright information | Lukas Fleischer | -1/+1 |
| html.c: die when write fails | John Keeping | -1/+1 |
| html.c: add various strbuf and varadic helpers | John Keeping | -3/+50 |
| html.c: Replace strdup() with xstrdup() | Lukas Fleischer | -5/+2 |
| Always #include corresponding .h in .c files | John Keeping | -0/+1 |
| html: check return value of write | Jason A. Donenfeld | -2/+3 |
| Mark several functions/variables static | Lukas Fleischer | -3/+3 |
| White space around control verbs. | Jason A. Donenfeld | -7/+7 |
| Fix several whitespace errors | Lukas Fleischer | -39/+39 |
| html.c: avoid out-of-bounds access for url_escape_table | Eric Wong | -2/+2 |
| Properly escape ampersands inside HTML attributes | Lukas Fleischer | -1/+3 |
| Fix memory leak in http_parse_querystring(). | Lukas Fleischer | -2/+3 |
| Fix escaping of paths with spaces | Jonathon Mah | -4/+6 |
| html.c: add html_intoption() | Lars Hjemli | -0/+8 |
| do not infloop on a query ending in %XY, for invalid hex X or Y | Jim Meyering | -1/+1 |
| html.c: use '+' to escape spaces in urls | Lars Hjemli | -2/+2 |
| prefer html_raw() to write() | Mark Lodato | -9/+9 |
| html: fix strcpy bug in convert_query_hexchar | Mark Lodato | -4/+5 |
| html: properly percent-escape URLs | Mark Lodato | -4/+32 |
| html: make all strings 'const char *' | Mark Lodato | -17/+17 |
| html.c: use correct escaping in html attributes | Lars Hjemli | -2/+4 |
| html.c: add html_url_path | Lars Hjemli | -0/+16 |
