Age	Commit message (Collapse)	Author	Lines
2026-09-22	Gate html serving behind trust-scan-config	Bryce Kwon	-3/+39
	enable-html-serving makes the plain page send a repository file as text/html on the site's own origin, with no nosniff and no policy, so a scanned repository could switch it on from its git config or cgitrc without trust-scan-config and run script against every visitor. The warning for a key read from git config also named a null repository, because repo->path was set only after that file had been read.
2026-09-21	Rename enable-trailers to enable-commit-trailers	Bryce Kwon	-1/+1
2026-09-15	Test the hardening pass	Bryce Kwon	-0/+471