Age	Commit message (Collapse)	Author	Lines
2026-09-27	Mark the parameters callbacks leave unused	Bryce Kwon	-1/+1
	With these and the two changes before them, cgit builds under git's DEVELOPER=1 settings, which also annotate their own callbacks this way.
2026-09-27	Name the right file and error in the scan logs	Bryce Kwon	-2/+3
	A failed stat logged the directory rather than the entry inside it, and a project list that failed to read printed strerror of the flag ferror returns, which names an unrelated error.
2026-09-27	Gate a readme ending in a colon like a disk path	Bryce Kwon	-3/+3
	trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself.
2026-09-22	Gate html serving behind trust-scan-config	Bryce Kwon	-11/+15
	enable-html-serving makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without trust-scan-config and run script against every visitor. The warning for a key read from git config also named a null repository, because repo->path was set only after that file had been read.
2026-09-15	Align with spaces instead of tabs	Bryce Kwon	-7/+7
2026-09-14	Harden the request path, scan and error recovery	Bryce Kwon	-23/+94
2026-09-12	Gate scanned filters with trust-scan-filters	Bryce Kwon	-2/+14
2026-09-07	Clean up the whole tree	Bryce Kwon	-20/+10
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-5/+6
2026-08-22	Log scan lock failures that are not contention	Bryce Kwon	-7/+7
2026-08-12	Remove the repository homepage feature	Bryce Kwon	-2/+0
2026-08-10	Restyle the sources and fix the audit's findings	Bryce Kwon	-118/+136
2026-08-05	Settle the names, types and layout of the sources	Bryce Kwon	-10/+11
2026-08-03	Hide git's default repository description	Bryce Kwon	-0/+10
2026-08-03	Strip the trailing slash before matching /.git	Bryce Kwon	-2/+5
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-1/+1
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-15	Avoid an out-of-bounds read on short scan paths	Bryce Kwon	-1/+1
	A relative path shorter than five bytes made the /.git suffix test read before the buffer.
2026-07-15	Reorganise into source, assets and libraries	Bryce Kwon	-0/+0
	Everything the build generates now lands in build/, so a clean is a single remove and the source tree stays free of build output.