| Age | Commit message (Expand) | Author | Lines |
|---|
| Check that link-commits encodes a rule capture | Bryce Kwon | -0/+7 |
| Check that markup inside a token is escaped | Bryce Kwon | -0/+3 |
| Time each hostile readme at two lengths | Bryce Kwon | -17/+48 |
| Check that a link's fragment is escaped | Bryce Kwon | -0/+3 |
| Prove a control byte cannot hide a link's scheme | Bryce Kwon | -2/+9 |
| Fetch avatar icons without a Referer | Bryce Kwon | -0/+1 |
| Read the login form table as layout | Bryce Kwon | -0/+1 |
| Name a missing Lua module in the error log | Bryce Kwon | -0/+17 |
| Log failed logins | Bryce Kwon | -0/+7 |
| Say that logging in needs https | Bryce Kwon | -1/+12 |
| Tell a signed-in visitor they have no access | Bryce Kwon | -0/+7 |
| Say when logins are unavailable | Bryce Kwon | -1/+37 |
| Keep counting across a split ordered list | Bryce Kwon | -0/+7 |
| Find a capitalised extension's lexer again | Bryce Kwon | -5/+12 |
| Write a session's expiry in whole seconds | Bryce Kwon | -0/+11 |
| Set the Lua prerequisite once for every test | Bryce Kwon | -25/+16 |
| Share the request helpers in the auth checks | Bryce Kwon | -77/+49 |
| Let an unmirrored sink fail the way Lua would | Bryce Kwon | -12/+0 |
| Drop the auth stubs no check reaches | Bryce Kwon | -20/+6 |
| Drop auth guards for input cgit never sends | Bryce Kwon | -3/+4 |
| Strip control characters from the location alone | Bryce Kwon | -2/+0 |
| Take a signed cookie apart with one match | Bryce Kwon | -0/+1 |
| Drop a highlighter check that tested the harness | Bryce Kwon | -6/+0 |
| Drop the highlighter's extension fallback | Bryce Kwon | -14/+5 |
| Drop a stray blank line from about-render's tests | Bryce Kwon | -1/+0 |
| Drop the readme hooks that nothing reads | Bryce Kwon | -5/+4 |
| Render the man pages that generators write | Bryce Kwon | -2/+69 |
| Render more of the markdown seen in readmes | Bryce Kwon | -0/+26 |
| Keep a readme whole past a NUL byte | Bryce Kwon | -6/+5 |
| Say when a login fails, and line up the form | Bryce Kwon | -1/+11 |
| Colour css properties and pseudo-classes | Bryce Kwon | -16/+21 |
| Escape the same characters in the highlighter | Bryce Kwon | -0/+29 |
| Give the trim timing check room for a slow host | Bryce Kwon | -2/+3 |
| Find a script's lexer from its shebang line | Bryce Kwon | -4/+11 |
| Ship the example tracker links commented out | Bryce Kwon | -7/+22 |
| Name the auth cookie __Host- where it can be | Bryce Kwon | -26/+51 |
| End a session when its account's hash changes | Bryce Kwon | -4/+20 |
| Load auth libraries only when a request needs one | Bryce Kwon | -0/+13 |
| Spend a missing account's login on a real hash | Bryce Kwon | -36/+68 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -0/+22 |
| Read the auth cookie in linear time | Bryce Kwon | -0/+10 |
| Offer avatars at twice the size to dense screens | Bryce Kwon | -0/+1 |
| Hash avatar addresses with SHA-256 | Bryce Kwon | -3/+5 |
| Mark avatar icons as decorative | Bryce Kwon | -3/+1 |
| Unwrap an avatar address in linear time | Bryce Kwon | -0/+7 |
| Draw no avatar when luaossl is missing | Bryce Kwon | -2/+11 |
| Give readme headings anchors like GitHub's | Bryce Kwon | -8/+21 |
| Keep underscores inside words out of emphasis | Bryce Kwon | -0/+6 |
| Let character references through to the browser | Bryce Kwon | -0/+9 |
| Honour backslash escapes in readmes | Bryce Kwon | -0/+9 |
