Age	Commit message (Collapse)	Author	Lines
8 days	Read the description file without repo.desc	Bryce Kwon	-14/+1
	Only a scanned repository fell back to its description file, so one listed in cgitrc without repo.desc showed "[no description]" however its file read. repo.desc may follow repo.path, so the file is read where a page shows the description, which also spares every other request the reads.
8 days	Report a word where cgitrc expects a number	Bryce Kwon	-1/+7
	atoi reads "yes" or "true" as 0, so repo.hide=yes, or cgit.hide true in a scanned repository's git config, silently did nothing. The values keep that meaning, since honouring them now would hide repositories on upgrade, but each one is logged with its file and line.
8 days	List scanned repositories in path order	Bryce Kwon	-4/+13
	readdir hands entries back in whatever order the filesystem keeps them, so proj111 could come before proj105 and a section could start twice. section-sort is off by default to keep the order written in cgitrc, and a scan has none to keep.
8 days	Log an owner lookup only when it fails	Bryce Kwon	-2/+6
	getpwuid leaves errno alone for a uid with no passwd entry, so a scan logged "Unable to read the owner" with "Success" as the reason for each repository such a uid owns.
9 days	Drop cgit_read_first_line's unread size output	Bryce Kwon	-2/+1
9 days	Leave the scan's summary to its header	Bryce Kwon	-7/+3
9 days	Drop the scan's redundant stats and one-pass loop	Bryce Kwon	-12/+11
	The description and cgitrc readers already return when the file will not open, a repository's description is never NULL before it is read, and the owner lookup never went round a second time.
9 days	Strip a scanned path's suffixes with git's helpers	Bryce Kwon	-10/+7
9 days	Let scan_tree choose the project list itself	Bryce Kwon	-2/+5
	Three callers wrote out the same choice, and the header already says a scan visits only the listed paths when a project list is set.
2026-09-27	Mark the parameters callbacks leave unused	Bryce Kwon	-1/+1
	With these and the two changes before them, cgit builds under git's DEVELOPER=1 settings, which also annotate their own callbacks this way.
2026-09-27	Name the right file and error in the scan logs	Bryce Kwon	-2/+3
	A failed stat logged the directory rather than the entry inside it, and a project list that failed to read printed strerror of the flag ferror returns, which names an unrelated error.
2026-09-27	Gate a readme ending in a colon like a disk path	Bryce Kwon	-3/+3
	trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself.
2026-09-22	Gate html serving behind trust-scan-config	Bryce Kwon	-11/+15
	enable-html-serving makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without trust-scan-config and run script against every visitor. The warning for a key read from git config also named a null repository, because repo->path was set only after that file had been read.
2026-09-15	Align with spaces instead of tabs	Bryce Kwon	-7/+7
2026-09-14	Harden the request path, scan and error recovery	Bryce Kwon	-23/+94
2026-09-12	Gate scanned filters with trust-scan-filters	Bryce Kwon	-2/+14
2026-09-07	Clean up the whole tree	Bryce Kwon	-20/+10
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-5/+6
2026-08-22	Log scan lock failures that are not contention	Bryce Kwon	-7/+7
2026-08-12	Remove the repository homepage feature	Bryce Kwon	-2/+0
2026-08-10	Restyle the sources and fix the audit's findings	Bryce Kwon	-118/+136
2026-08-05	Settle the names, types and layout of the sources	Bryce Kwon	-10/+11
2026-08-03	Hide git's default repository description	Bryce Kwon	-0/+10
2026-08-03	Strip the trailing slash before matching /.git	Bryce Kwon	-2/+5
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-1/+1
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-15	Avoid an out-of-bounds read on short scan paths	Bryce Kwon	-1/+1
	A relative path shorter than five bytes made the /.git suffix test read before the buffer.
2026-07-15	Reorganise into source, assets and libraries	Bryce Kwon	-0/+0
	Everything the build generates now lands in build/, so a clean is a single remove and the source tree stays free of build output.