Age	Commit message (Collapse)	Author	Lines
9 days	Gate html serving behind trust-scan-config	Bryce Kwon	-11/+15
	`enable-html-serving` makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without `trust-scan-config` and run script against every visitor. The warning for a key read from git config also named a null repository, because `repo->path` was set only after that file had been read.
2026-09-22	Align with spaces instead of tabs	Bryce Kwon	-7/+7
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-23/+94
2026-09-15	Gate scanned filters with `trust-scan-filters`	Bryce Kwon	-2/+14
2026-09-06	Clean up the whole tree	Bryce Kwon	-20/+10
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-5/+6
2026-08-23	Log scan lock failures that are not contention	Bryce Kwon	-7/+7
2026-08-14	Remove the repository homepage feature	Bryce Kwon	-2/+0
2026-08-12	Restyle the sources and fix the audit's findings	Bryce Kwon	-118/+136
2026-08-06	Settle the names, types and layout of the sources	Bryce Kwon	-10/+11
2026-08-02	Hide git's default repository description	Bryce Kwon	-0/+10
2026-08-02	Strip the trailing slash before matching `/.git`	Bryce Kwon	-2/+5
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-1/+1
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-15	Avoid an out-of-bounds read on short scan paths	Bryce Kwon	-1/+1
	A relative path shorter than five bytes made the `/.git` suffix test read before the buffer.
2026-07-15	Reorganize into source, assets and libraries	Bryce Kwon	-0/+269
	The C sources move to source/, the served files to assets/, the bundled Git submodule to libraries/git and the filter scripts to extensions/. Everything the build generates now lands in build/, so a clean is a single remove and the tree stays clean.