AgeCommit message (Collapse)AuthorLines
Gate a readme ending in a colon like a disk pathBryce Kwon-0/+6
trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself. The two now share one test.
Replace the stray bytes of text that is not UTF-8Bryce Kwon-0/+12
A commit whose encoding header names something iconv cannot convert, or whose text is labelled UTF-8 without being it, reached a page declared UTF-8 with its bytes untouched. The atom feed already replaced them, so its UTF-8 reader moves to shared.c and every ident, subject, message and tag text passes through it.
Limit rawdiff to the requested pathBryce Kwon-0/+5
The diff and patch pages honour the path in the url, which the parameter table documents for every page, but rawdiff never handed it to git and answered with the whole diff.
Harden the request path, scan and error recoveryBryce Kwon-6/+20
Clean up the whole treeBryce Kwon-13/+8
Restyle the sources and fix the audit's findingsBryce Kwon-0/+92