Age	Commit message (Collapse)	Author	Lines
21 hours	Work out each gitlink's target once	Bryce Kwon	-4/+1
	Test bodies run in the main shell, so the target named in the fixture reaches every check that greps for it.
21 hours	Serve both readme escaping checks from one config	Bryce Kwon	-16/+9
21 hours	Ask each page that sorts odd branches in one loop	Bryce Kwon	-23/+8
21 hours	Write the test filter scripts with write_script	Bryce Kwon	-3/+1
21 hours	Drop test lines that add nothing	Bryce Kwon	-1/+0
	The trash directory starts empty and setup.sh already made the cache, the clamp check already fails on a short query, and the commit the setup named is still there to pin.
21 hours	Leave two log checks to the log tests	Bryce Kwon	-5/+0
	t0103 already renders foo/log and finds commit 5, and its search for a bracket fails the same way this literal search did if --fixed-strings ever goes.
21 hours	Leave the blob size refusals to the limits tests	Bryce Kwon	-22/+5
	t0204 asks the tree, plain, blob and blame pages for one oversized blob and checks the exact status and message, so the looser copy here went.
2026-10-17	Serve only the files a dumb clone asks for	Bryce Kwon	-2/+2
	The object path check let any run of safe characters through, so a spelling such as info//alternates or info/./alternates reached the alternates file the exact name was refused for. Only a loose object, a pack with its index and info/http-alternates are served now, and any other path is not found.
2026-10-16	Describe root-readme as the site's about page	Bryce Kwon	-0/+16
2026-10-16	Answer 404 for any path below the about page	Bryce Kwon	-1/+1
	The about page served every file beside the readme as a page of its own, through the about filter, and answered 200 for directories and missing files alike. Images it passed through came from the root of the default branch whatever the readme's own directory and ref. A readme on disk exposed its whole directory this way.
2026-10-01	Pin the advisory classes with tests and name an empty author	Bryce Kwon	-0/+110
	Each class behind cgit's published advisories now has a check against the current code, from a newline in a file name to shell syntax handed to a filter. The feed also treated an ident with an empty name and an empty address as present and wrote an empty person, which Atom forbids.
2026-09-21	Test the hardening pass	Bryce Kwon	-1/+1
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-5/+26
2026-09-06	Clean up the whole tree	Bryce Kwon	-2/+1
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-4/+2
2026-09-06	Remove the auto-submitting selects	Bryce Kwon	-4/+4
2026-08-24	Renumber the test scripts into themed ranges	Bryce Kwon	-0/+358
	t000x the ground the suite stands on: git version, html validity, the cache t01xx page content, one script per page t02xx features that cut across pages: filters, submodule links, dates, limits t03xx defence, the security regressions and the $HOME promise t04xx the helper tools under tools/