AgeCommit message (Collapse)AuthorLines
Point clone rows at a url a browser can followBryce Kwon-7/+1
Replace nbsp spacing with CSSBryce Kwon-4/+4
Tidy the structure of the generated markupBryce Kwon-2/+2
Remove the obsolete summary attributesBryce Kwon-3/+3
Let the listings wrap and the diff tables scrollBryce Kwon-2/+2
Restyle the sources and fix the audit's findingsBryce Kwon-60/+83
Settle the names, types and layout of the sourcesBryce Kwon-2/+2
Swap the browser markdown renderer for a filterBryce Kwon-30/+4
The readme is now escaped plain text unless about-filter points at the new about-render.lua, which renders markdown, man pages and plain text server-side. The enable-markdown setting goes away with the renderer.
Keep line structure in plaintext readmesBryce Kwon-1/+4
Point the fork's links and credits at itselfBryce Kwon-1/+1
AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
Require a boundary in the about-path prefix checkBryce Kwon-1/+7
The about subpath was confined to the readme directory with a plain byte-prefix match, so a sibling directory sharing the base name as a prefix passed the check and its files were served.
Escape non-markdown readmes without a filterBryce Kwon-2/+16
A readme that is not markdown was written to the about page as raw HTML when no about-filter was configured, so an untrusted repository could inject script.
Render README markdown in the browserBryce Kwon-9/+39
cgit had no markdown support of its own, so a readme was rendered through an external python filter or not at all. Escaping the source and formatting it in cgit.js keeps the work in the browser like the blob highlighter, and the page stays readable as plain text without scripting.
Reorganise into source, assets and librariesBryce Kwon-0/+0
Everything the build generates now lands in build/, so a clean is a single remove and the source tree stays free of build output.