Age	Commit message (Collapse)	Author	Lines
16 hours	Percent-encode a submodule path in its link	Bryce Kwon	-1/+4
	A module-link template takes the path as the tree names it, so a path holding a space or a byte past ASCII gave an href that broke there. The url is now encoded the way a clone url is.
16 hours	Add filename* for a download name past ASCII	Bryce Kwon	-1/+32
	The plain, snapshot and blob pages sent a name such as café.txt raw in filename, which a client may read as ISO-8859-1. RFC 6266 has such a name sent again as filename*, percent-encoded in UTF-8, for a client that knows the form, with filename first for one that does not. The extended form carries UTF-8 alone, so a name that is not valid UTF-8 keeps the plain filename by itself.
16 hours	Percent-encode a clone url in its href	Bryce Kwon	-2/+2
	An href carried git://example.org/dépôt.git as it was, and the space of "with space" too, neither of which a url may hold. html_url_path would also encode the plus of git+ssh, which breaks the scheme, and the percent of an escape the url was written with, so a whole url gets a helper that encodes only the bytes RFC 3986 allows nowhere.
16 hours	Keep a space in a repository url in one clone url	Bryce Kwon	-3/+13
	The shared repository "with space" listed git://example.org/with and space.git as two clone urls, and the head linked the first alone. The manual calls clone-url a list of templates, so the list is now split before each template is expanded. A clone-prefix was right already, as the url is joined to it after the split.
3 days	Name a pinned commit with the page in the title	Bryce Kwon	-3/+28
7 days	Keep the login page out of search indexes	Bryce Kwon	-3/+6
7 days	Keep a protected repository's header to itself	Bryce Kwon	-3/+7
	The login page stands in for any page of the repository, so it named the description and owner of one the visitor may not see, including one hidden from the index. The site's own description fills the line, as on the index, so the header keeps its height.
7 days	Name the logo after the site	Bryce Kwon	-1/+5
7 days	Answer a submodule path with the submodule	Bryce Kwon	-12/+30
	The tree page read the gitlink's commit as a blob, which outside the repository is a bad object id and inside it is the commit's raw text.
7 days	Lead an error page's title with the error	Bryce Kwon	-2/+8
	The config error page had a title of its own, in the reverse order, and now takes the same one as any other 404, since its message already says the repository failed to open.
7 days	Keep the range in a large diff's patch link	Bryce Kwon	-3/+11
	The link named only id, so for a diff between two commits it led to a patch of the newer one alone, and without an id it lost the branch as well and led to the default branch's tip.
7 days	Lead a blame page's folder crumbs to the tree	Bryce Kwon	-2/+17
7 days	Link snapshots of a slash ref by a dashed name	Bryce Kwon	-4/+27
	The snapshot page refuses to work a revision out of a name holding a slash, since that name becomes the top directory of the archive, so every link for a ref like release/2.0 answered 404. The ref now goes in the link as the id, and the archive unpacks into the repository's own prefix, as any snapshot asked for by id does.
8 days	Print line number anchors through one helper	Bryce Kwon	-0/+16
8 days	Print the commit and tag dates through one helper	Bryce Kwon	-0/+9
8 days	Print each person through one helper	Bryce Kwon	-0/+12
	The log, refs and tag pages no longer open a filter of their own, so they stop including filter.h.
8 days	Refuse pathspec magic through one helper	Bryce Kwon	-0/+8
8 days	Start each history walk through one helper	Bryce Kwon	-0/+8
9 days	Drop the hidden form fields' unused page argument	Bryce Kwon	-3/+3
9 days	Look up a request's commit in one place	Bryce Kwon	-0/+27
	The diff page now names a revision that is no commit the way the request wrote it, as the other pages already did, rather than as the full id it resolved to. The helpers sit beside the error page in ui-shared.c, since shared.c prints nothing.
9 days	Spell the signature suffix once for both files	Bryce Kwon	-2/+2
9 days	Open and close each page through the layout calls	Bryce Kwon	-36/+31
9 days	Allocate formatted strings with git's xstrfmt	Bryce Kwon	-7/+7
9 days	Keep the permission triplet beside its one caller	Bryce Kwon	-3/+8
9 days	Keep the clone row and title docs in the header	Bryce Kwon	-10/+0
9 days	Keep three helpers beside their only callers	Bryce Kwon	-62/+62
9 days	Build cgit_date_mode's result on the stack	Bryce Kwon	-2/+1
9 days	Write the meta description in one place	Bryce Kwon	-6/+4
9 days	Read a title's path from the end with strrchr	Bryce Kwon	-20/+7
9 days	Trim trailing slashes with git's strbuf helper	Bryce Kwon	-12/+4
9 days	Build the full current url from the current url	Bryce Kwon	-8/+3
9 days	Fold the va_list error page into its one caller	Bryce Kwon	-12/+4
9 days	Ask head_is_named before carrying the branch	Bryce Kwon	-1/+1
9 days	Let self_link's fallback be a plain reporevlink	Bryce Kwon	-8/+2
9 days	Escape a submodule link's class like the others	Bryce Kwon	-6/+6
9 days	Open site and repository links through one helper	Bryce Kwon	-24/+17
9 days	Write each query argument through one helper	Bryce Kwon	-49/+30
9 days	Return repolink's delimiter without copying it	Bryce Kwon	-1/+1
9 days	Drop the query-string form of every link	Bryce Kwon	-83/+30
	The virtual root is set from SCRIPT_NAME before cgitrc is read, so it always holds a value and the ?url= and ?r= forms were never reached. The page argument of cgit_add_hidden_formfields fed only the url field, so it is unused until its callers stop passing it.
9 days	Stop leaking the host on an embedded page	Bryce Kwon	-3/+3
9 days	Stop leaking the short hash of an object link	Bryce Kwon	-7/+4
9 days	Trim a snapshot name without reading out of bounds	Bryce Kwon	-28/+10
	For a url of .git, or an empty one, repo_basename stepped its index to the byte before its buffer, read it, and would have cleared it had it held a slash. Git's strbuf trims take the same steps safely, and they lift the 1024-byte cap that failed the page for a longer url.
12 days	Offer the versions as an option	Bryce Kwon	-1/+9
	enable-version-info brings back the cgit and git versions that 872bd7c took off the footer and the generator tag, for a site that wants them, and the version f7d2b83 put on the signature of patches now follows it too. It stays off by default for the reason 872bd7c gave.
13 days	Name the page first in every title	Bryce Kwon	-0/+10
	Summary, about, log, refs, tag and stats pages shared one title, so tabs, history and search results could not tell them apart. Titles now read page, repository and site, with root-title as the site, and the description stays in the meta description, where search engines read it.
13 days	Load the scripts with defer	Bryce Kwon	-1/+1
	A plain script in the head held up parsing until it had downloaded and run, though cgit.js only acts once the document is ready. Deferred scripts still run in the order given and before DOMContentLoaded, so a site script after cgit.js can still call window.cgit.
2026-10-24	Keep each snapshot link in one piece	Bryce Kwon	-0/+4
	On a narrow screen the download column broke a snapshot name at a hyphen or left its signature link alone on the next line.
2026-10-15	Show an odd pushed date rather than die on it	Bryce Kwon	-3/+3
	A date past what the system holds, a zone that is no hhmm offset, or a date earlier than its own westward offset all made git die inside show_date, which took the summary, refs, log, commit and feed pages of the repository down. They are now clamped as git's own log clamps them.
2026-10-14	Check the id before the page chrome resolves it	Bryce Kwon	-0/+4
	The chrome renders on an error page too, where the id had just been refused for using the wider revision syntax, and then looked it up anyway. A :/pattern id walks the whole history for a match.
2026-10-11	Cut text between characters, never inside one	Bryce Kwon	-7/+1
	The index description was cut at a byte count, which could split a multibyte character and leave an invalid sequence on the page. Commit subjects already backed up to the start of the character, so html_ntxt now does that for every caller.
2026-10-10	Read a negative ref count as no limit	Bryce Kwon	-1/+1
	summary-branches, summary-tags and max-ref-count already listed every ref at 0, but a negative value reached qsort as a count and crashed the summary and refs pages, and emptied the branch switcher.