AgeCommit message (Collapse)AuthorLines
Name the right file and error in the scan logsBryce Kwon-2/+3
A failed stat logged the directory rather than the entry inside it, and a project list that failed to read printed strerror of the flag ferror returns, which names an unrelated error.
Gate a readme ending in a colon like a disk pathBryce Kwon-3/+3
trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself. The two now share one test.
Gate html serving behind trust-scan-configBryce Kwon-11/+15
`enable-html-serving` makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without `trust-scan-config` and run script against every visitor. The warning for a key read from git config also named a null repository, because `repo->path` was set only after that file had been read.
Align with spaces instead of tabsBryce Kwon-7/+7
Harden the request path, scan and error recoveryBryce Kwon-23/+94
Gate scanned filters with `trust-scan-filters`Bryce Kwon-2/+14
Clean up the whole treeBryce Kwon-20/+10
Trim the comments and dead code across the treeBryce Kwon-5/+6
Log scan lock failures that are not contentionBryce Kwon-7/+7
Remove the repository homepage featureBryce Kwon-2/+0
Restyle the sources and fix the audit's findingsBryce Kwon-118/+136
Settle the names, types and layout of the sourcesBryce Kwon-10/+11
Hide git's default repository descriptionBryce Kwon-0/+10
Strip the trailing slash before matching `/.git`Bryce Kwon-2/+5
Point the fork's links and credits at itselfBryce Kwon-1/+1
AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
Avoid an out-of-bounds read on short scan pathsBryce Kwon-1/+1
A relative path shorter than five bytes made the `/.git` suffix test read before the buffer.
Reorganize into source, assets and librariesBryce Kwon-0/+269
The C sources move to source/, the served files to assets/, the bundled Git submodule to libraries/git and the filter scripts to extensions/. Everything the build generates now lands in build/, so a clean is a single remove and the tree stays clean.