Age	Commit message (Collapse)	Author	Lines
18 hours	Move the snapshot name tests to the snapshot tests	Bryce Kwon	-23/+29
	They take a plain tar, which needs no compressor on the machine.
18 hours	Move the directory diff caps test to the limits	Bryce Kwon	-21/+19
18 hours	Move the odd dates test to the dates tests	Bryce Kwon	-41/+43
	The notes test had borrowed its repository, so it now builds one.
18 hours	Move the Conflicts test to the trailers tests	Bryce Kwon	-25/+20
	Its message came from a here-document with a dash, which stripped the tab git knows a Conflicts path by. git then found no trailer block at all, so the test passed with the guard it is about removed. The message is now written with printf.
18 hours	Give each robustness test a fixture of its own	Bryce Kwon	-106/+143
	repos/rob took commits, refs, tags, a repack and a moved HEAD from test after test, so what a test checked hung on the ones before it. A test that changes a repository, or needs one in a shape of its own, now builds it, and rob is only read. The tests that leaned on a config or a scanned repository an earlier test left build their own too.
18 hours	Move the mimetype file tests to the plain tests	Bryce Kwon	-22/+23
	Each now writes a types file and config of its own rather than rewriting the one the test before it left.
18 hours	Move the tree grouping test to the tree tests	Bryce Kwon	-17/+22
	Grouping folders first is tree page behaviour rather than a security fix, so it joins the tree tests on a repository of its own.
18 hours	Check the submodule pin against the Makefile	Bryce Kwon	-2/+16
	The commit named is the one Git's v2.56.0 tag peels to upstream.
18 hours	Share the rename fixture of the diff pages	Bryce Kwon	-31/+25
	Each repository is built tree for tree as before. A helper that lost the caller's change would still fail t0107, where following no path shows file-1, but t0108 passed without its added line, so it now looks for that line.
18 hours	Add a helper for configs of several repositories	Bryce Kwon	-49/+32
	The configs a run of t0101 writes are byte for byte what they were. The scan configs name no repository and descrc adds one to a copy of the shared config, so those keep their own form.
18 hours	Show the lua filter pass as skipped without Lua	Bryce Kwon	-16/+13
	A build without Lua left the eight tests of that pass out of the run, where the rest of the script counts its Lua tests as skipped.
18 hours	Ask for a missing commit of the hash under test	Bryce Kwon	-3/+2
	The id was written as 40 hex digits, which failed the test in a run with GIT_TEST_DEFAULT_HASH=sha256.
18 hours	Check the reference config changes nothing	Bryce Kwon	-0/+21
18 hours	Check the manual against the keys cgit accepts	Bryce Kwon	-0/+35
18 hours	Report a max-stats value that names no period	Bryce Kwon	-0/+27
	A value cgit does not know as a period turns the statistics page off, so a typo such as "decade" read the same as leaving stats off on purpose. The empty value stays quiet because a cached repolist writes it for a repository that turned stats off.
18 hours	Link a file name of stray bytes percent-encoded	Bryce Kwon	-0/+18
	No test gave a file name invalid UTF-8 or a control byte, which APFS refuses on disk, so the tree is built through the index.
18 hours	Ask for gzip where the tag snapshot needs it	Bryce Kwon	-5/+8
	The test ran gzip without the GZIP prerequisite t0110 uses for the same need, and it took a file-1 anywhere in the listing rather than under the tag's own prefix.
18 hours	Keep the robustness tests to portable shell	Bryce Kwon	-5/+5
	An unquoted $cgitbin breaks in a checkout whose path holds a space, and head -c and head -1 are not POSIX. The status of the disconnected request is still read right after its pipeline, which assumes the shell waits for the left side as dash, bash, ksh and busybox ash all do.
19 hours	Hold hand-written refs to the files backend	Bryce Kwon	-16/+20
	A loose ref written by hand needs the files backend, so under GIT_TEST_DEFAULT_REF_FORMAT=reftable the broken tree test failed, and the die test after it with it, since it borrowed that clone. It now makes its own. Both index tests that stat a path through refs/heads also passed there with their checks gone, as reftable keeps refs/heads as a file. The commit is rewritten through files rather than a pipeline that hid cat-file failing.
19 hours	Read the expected blob through its own tag	Bryce Kwon	-5/+7
	The expected content was "more" only because an earlier test had rewritten file-1, and the next test reused that file and the tag. The tag.gpgsign override did nothing, since test-lib already keeps the user's config out.
19 hours	Give the symlink cycle a scan directory of its own	Bryce Kwon	-3/+11
	The expected count of 2 held only because earlier tests had made a.git and b.git and one of them had dropped b.git's cgitrc.
19 hours	Drop the loose directory chain bound	Bryce Kwon	-13/+0
	The count was bounded only from above, and loosely, so a page listing no directories passed, as would a limit of 16. t0104's long directory chain test already pins the bound exactly.
19 hours	Check the row of a symlink to a large blob	Bryce Kwon	-4/+6
	The blob came out of a pipeline whose failure would have left it empty and the test passing, and nothing looked at the row itself. head -c is not POSIX either.
19 hours	Restore HEAD however the fallback test ends	Bryce Kwon	-10/+7
	HEAD was put back inside the && chain after cgit ran, so a failure left repos/rob on a missing branch for every later test. The switcher check also read the page this test left, and now runs in the same test.
19 hours	Count the answers to a corrupt blob in a diff	Bryce Kwon	-3/+4
	Unlike its siblings the test never counted status lines, so a second page after the first went unnoticed. The headers are out by the time the diff is collected, so the one answer stays a 200 holding the error.
19 hours	Prove the cache keeps what the ttl test refuses	Bryce Kwon	-11/+14
	cache_process bypasses a ttl of 0 and fails quietly in many ways, so with a dead cache the test passed whatever ttl the page got. A second config that keeps the same page for ever now has to replay it, from a cache of its own, since slots are keyed on the request alone.
19 hours	Pair each absence check with what has to be there	Bryce Kwon	-12/+17
	Every page ends in </html>, the 404 for no repositories included, and an index, an error page or a page cut short lacks most things, so the path-less repository, the empty url, the page without an auth filter and the refused id each now show the page that was meant to render.
19 hours	Expect working pages beside a notes ref at a blob	Bryce Kwon	-10/+7
	The loop asserted only absences, so a 404 or any error but the die text passed, and the final 404 is also what a name that resolves to nothing gets.
19 hours	Follow the link from an outer tag to its inner one	Bryce Kwon	-4/+6
	The test opened the inner tag by id and never looked at the outer tag's page or the link the title is about.
19 hours	Name what a missing parent really does to the log	Bryce Kwon	-8/+14
	The log walks the history before it prints a row, so nothing ahead of the gap ever renders and the title promised more than the page shows. The test also took its gap from the shared repository, where HEAD~2 was a given commit only because of tests run before it.
19 hours	Make the early-exit filter meet a closed pipe	Bryce Kwon	-7/+10
	The email filter was handed a few bytes, which usually sit in the pipe before the filter has even exited, so a cgit that died of SIGPIPE passed most runs. A source filter handed more than a pipe holds has to see the write fail.
19 hours	Hold the mailmap to max-blob-size	Bryce Kwon	-0/+31
	git's read_mailmap_blob inflates the whole blob, so a pusher could make every page of a repository read as much as they liked. git reads a note and the .gitmodules file whole as well, and capping those would mean bounding the lookups where the log, commit and tree pages make them, so the manual names them instead. Nothing tested that mailmap.file and mailmap.blob are ignored either.
19 hours	Test markup in a scanned repository's own words	Bryce Kwon	-0/+26
	A scanned repository sets its description, owner and section without trust, and no test gave them any markup.
19 hours	Test blame on a binary file	Bryce Kwon	-0/+21
	t0104's binary fixture never turns blame on, so neither the blame page's own refusal nor the missing link on the file's page had a test.
19 hours	Test a HEAD aimed outside its repository	Bryce Kwon	-0/+18
	The defbranch check had a test while its twin for a crafted HEAD, which the index reads the same way to date a repository, had none.
19 hours	Pin the robots.txt rules	Bryce Kwon	-0/+13
	Nothing in tests/ read robots.txt, so dropping the trailing slashes again went unnoticed.
19 hours	Feed the Location header every kind of byte	Bryce Kwon	-0/+13
	Only a benign query had been redirected, so nothing showed that a space, a control byte or a byte past ASCII in the query string is encoded before it reaches the Location header.
19 hours	Test the download names a request chooses	Bryce Kwon	-0/+18
	The plain page's header was the only one fed a newline. A snapshot asked for with h= keeps the name it was requested under, and a blob fetched by id takes any path, so both put visitor bytes into Content-Disposition.
19 hours	Check the empty author on every page it reaches	Bryce Kwon	-9/+22
	The title claimed every page, but only the log, commit and atom pages were asked for. The commit now changes a file, since the patch page leaves out a commit with nothing to show, and its parent is read before the printf, where a failed rev-parse would have gone unnoticed.
19 hours	Test the dumb transport allowlist in one table	Bryce Kwon	-24/+18
	The allowlist was tested in two places, and the 404 alone did not show the transport was live behind the auth filter, since a page that does not exist answers the same. A loose object and HEAD now have to come through, and the planted alternates file is removed even when the test fails, where it used to leave rob borrowing foo's objects.
19 hours	Ask for the two 404 pages with the cache off	Bryce Kwon	-10/+9
	Both requests went through the shared page cache, and the clone one only worked because clone pages are never stored, which is what the cgitrc_copy comment warns of.
19 hours	Check the order of branches at odd objects	Bryce Kwon	-14/+27
	points-at-tree only ever matched its entry in the branch switcher, and points-at-tag was never looked for. Every branch also shared one date, so the age and name sorts gave the same rows, and nothing showed the name setting had applied. The loose refs written by hand need the files backend.
19 hours	Read the surplus conversions from their own page	Bryce Kwon	-6/+3
	The check read the page the previous test had left, and it took any hex where the commit goes and only two of the eight conversions.
19 hours	Try every risky scheme in a .gitmodules url	Bryce Kwon	-12/+29
	Only a lowercase javascript url was tried, so a denylist of that one spelling would have passed. The quote test also read the page the test before it had left.
19 hours	Test request values a page echoes back	Bryce Kwon	-0/+36
	Only %zz%2 had been sent, so nothing showed that markup in the query, the hidden inputs a form carries, the errors naming a refused value or the Host header is escaped on its way back.
19 hours	Check the lone percent sign in the search box	Bryce Kwon	-5/+4
	For a bare q=% only the status was checked, so a decoder that dropped the sign passed.
19 hours	Test markup in refs, names and messages	Bryce Kwon	-0/+54
	No test gave a ref name, a commit or tag message, a note or an ident any markup, and the one hostile file name never reached an attribute. html_txt leaves quotes alone, so a name holding both a quote and a bracket is what tells an attribute written as text.
19 hours	Test the leading slashes stripped from a url	Bryce Kwon	-0/+16
	Nothing showed that every leading slash goes, through url= or PATH_INFO, and one left behind joins the virtual root into a scheme-relative link to another host.
19 hours	Send the advisory payloads through PATH_INFO	Bryce Kwon	-0/+35
	All three shipped server configs hand cgit the path as PATH_INFO, already decoded, yet every hostile path in the tests went through url= instead.
20 hours	Prove the filter saw the hostile file name	Bryce Kwon	-5/+4
	The name also sits in the breadcrumb and the title, so the test passed with the source filter never run, and the missing marker proved nothing. dump.sh echoes its arguments ahead of the body it upper-cases, which shows the name arrived whole as one argument.