Age	Commit message (Collapse)	Author	Lines
8 days	Serve only the files a dumb clone asks for	Bryce Kwon	-2/+2
	The object path check let any run of safe characters through, so a spelling such as info//alternates or info/./alternates reached the alternates file the exact name was refused for. Only a loose object, a pack with its index and info/http-alternates are served now, and any other path is not found.
9 days	Describe root-readme as the site's about page	Bryce Kwon	-0/+16
9 days	Answer 404 for any path below the about page	Bryce Kwon	-1/+1
	The about page served every file beside the readme as a page of its own, through the about filter, and answered 200 for directories and missing files alike. Images it passed through came from the root of the default branch whatever the readme's own directory and ref. A readme on disk exposed its whole directory this way.
2026-10-01	Pin the advisory classes with tests and name an empty author	Bryce Kwon	-0/+110
	Each class behind cgit's published advisories now has a check against the current code, from a newline in a file name to shell syntax handed to a filter. The feed also treated an ident with an empty name and an empty address as present and wrote an empty person, which Atom forbids.
2026-09-21	Test the hardening pass	Bryce Kwon	-1/+1
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-5/+26
2026-09-06	Clean up the whole tree	Bryce Kwon	-2/+1
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-4/+2
2026-09-06	Remove the auto-submitting selects	Bryce Kwon	-4/+4
2026-08-24	Renumber the test scripts into themed ranges	Bryce Kwon	-0/+0
	t000x the ground the suite stands on: git version, html validity, the cache t01xx page content, one script per page t02xx features that cut across pages: filters, submodule links, dates, limits t03xx defence, the security regressions and the $HOME promise t04xx the helper tools under tools/
2026-08-24	Resolve submodule links from `.gitmodules`	Bryce Kwon	-1/+40
2026-08-12	Tidy the test comments and shell portability	Bryce Kwon	-25/+41
2026-08-08	Sort refs by the date the ref actually carries	Bryce Kwon	-0/+57
2026-08-08	Expand `module-link` placeholders outside printf	Bryce Kwon	-0/+71
2026-08-01	Mark the security test executable	Bryce Kwon	-0/+0
2026-08-01	Drop the help tab and its built-in guide	Bryce Kwon	-25/+0
2026-07-25	Replace the browser markdown renderer with a filter	Bryce Kwon	-2/+2
	The readme is now escaped plain text unless `about-filter` points at the new `about-render.lua`, which renders markdown, man pages and plain text server-side. `enable-markdown` goes away with the renderer.
2026-07-25	Backfill an absent commit message	Bryce Kwon	-0/+22
2026-07-25	Percent-encode file paths in side-by-side diffs	Bryce Kwon	-0/+26
2026-07-19	Add a help page with common workflows	Bryce Kwon	-0/+25
2026-07-19	Keep line structure in plaintext readmes	Bryce Kwon	-0/+4
2026-07-19	Submit option forms without inline handlers	Bryce Kwon	-0/+10
2026-07-16	Add security and fork-behaviour regression tests v2.0.0	Bryce Kwon	-0/+113