Age	Commit message (Collapse)	Author	Lines
3 days	Cut the nginx config down to a generic drop-in	Bryce Kwon	-16/+2
	The old file was a complete nginx.conf with TLS, compression, catch-all hosts and security headers, and it had to be taken apart before it ran beside a distribution's own nginx.conf. A server block included from the http block leaves the user, the MIME types and the logs to the distribution. Its header gives one default path per thing, adjusted where a system differs, which leaves packagers a plain base to adapt rather than a table for each distribution. HTTPS and git-http-backend are commented examples, so the file serves plain HTTP as shipped. The backend takes only the three smart HTTP paths at cgit's own repository urls, so every page still reaches cgit. git refuses a repository another user owns, which failed every clone until safe.directory was set for the backend, and a 3 MB push got 413 until the location lifted nginx's body limit. The split empties SCRIPT_NAME because a second SCRIPT_NAME after the include reaches fcgiwrap as well, and cgit reads the first one, which put every link under the request path. cgit sends nosniff and a locked policy on raw output itself, so the configs no longer carry one. The t0004 check that all three agree goes here, with the first of them to drop it.
4 days	Let a keyboard scroll the stats table	Bryce Kwon	-0/+6
	It scrolls sideways like the hex dump, with nothing inside a keyboard can reach, so it takes focus and the shared focus ring the same way.
4 days	Name a pinned commit with the page in the title	Bryce Kwon	-0/+13
4 days	Let a keyboard scroll the hex dump	Bryce Kwon	-1/+10
	Chrome and Firefox already let an overflowing box take focus, with their own ring, but WebKit does not. The table takes focus on a mouse click as well, where focus-visible keeps the ring off.
4 days	Read the file and diff tables as layout	Bryce Kwon	-0/+12
	The file view's table only sets the line numbers beside the code, and the unified diff's is a single cell holding every file.
4 days	Read the login form table as layout	Bryce Kwon	-0/+1
4 days	Say which index column is sorted	Bryce Kwon	-0/+13
4 days	Put a Lua filter's print output where it runs	Bryce Kwon	-0/+20
	LuaJIT and Lua 5.1 leave print's line in stdio's buffer until cgit exits, after the end of the page.
4 days	Report a snapshot format name that matches nothing	Bryce Kwon	-0/+19
4 days	Answer an empty repository's feed with a feed	Bryce Kwon	-0/+19
4 days	Keep a repository's own settings in a cached scan	Bryce Kwon	-0/+47
	A scanned repository is read back from the cached list under the global settings, so a setting that only differed from them by being off, or by naming the default value, came back as the global one. branch-sort was written only for age, per-path module links not at all, and a filter a repository turned off left no line behind. Writing an empty value for a filter turned off makes the list depend on whether each global filter is set, so the scan key names that too.
5 days	Keep the placeholder out of a cached scan	Bryce Kwon	-0/+12
	The cached list wrote "[no description]" like any other description, so once read back it no longer counted as the placeholder and became the meta description of every repository without one. Repositories read back from the list are also marked as having had their description file read, since the scan already did, so the index does not open those files again on every request.
5 days	Leave the scan uncached with a negative cache-size	Bryce Kwon	-0/+15
	The page cache counts a cache-size of 0 or less as off, but scan-path cached its list for any value other than 0, so a negative one still wrote a list into cache-root.
7 days	Name a missing Lua module in the error log	Bryce Kwon	-5/+25
7 days	Log failed logins	Bryce Kwon	-0/+7
	The login posts outside any repository, so the log line names the repository by the page its signed way back leads to.
7 days	Say that logging in needs https	Bryce Kwon	-1/+12
	Only HTTPS=on counts, the same test cgit makes before it writes an https link of its own.
7 days	Tell a signed-in visitor they have no access	Bryce Kwon	-0/+7
7 days	Say when logins are unavailable	Bryce Kwon	-3/+40
	The way back was signed part way through the form, so while the secret's directory did not exist, or a library was missing, cgit's error landed inside the hidden input and the page broke off there with no fields.
7 days	Keep counting across a split ordered list	Bryce Kwon	-0/+7
8 days	Keep the login page out of search indexes	Bryce Kwon	-0/+14
8 days	Keep a protected repository's header to itself	Bryce Kwon	-0/+28
	The login page stands in for any page of the repository, so it named the description and owner of one the visitor may not see, including one hidden from the index. The site's own description fills the line, as on the index, so the header keeps its height.
8 days	Name the logo after the site	Bryce Kwon	-0/+7
8 days	Head the tag table's column for what it holds	Bryce Kwon	-0/+13
8 days	Say when a log search matches nothing	Bryce Kwon	-0/+10
8 days	Answer a submodule path with the submodule	Bryce Kwon	-0/+9
	The tree page read the gitlink's commit as a blob, which outside the repository is a bad object id and inside it is the commit's raw text.
8 days	Say when nothing matches a mistyped url	Bryce Kwon	-0/+11
8 days	Lead an error page's title with the error	Bryce Kwon	-0/+13
	The config error page had a title of its own, in the reverse order, and now takes the same one as any other 404, since its message already says the repository failed to open.
8 days	Keep the range in a large diff's patch link	Bryce Kwon	-0/+11
	The link named only id, so for a diff between two commits it led to a patch of the newer one alone, and without an id it lost the branch as well and led to the default branch's tip.
8 days	Offer blame only where it works	Bryce Kwon	-0/+29
	The blame page answers 404 for a symlink, since git blames a regular file alone, and it refuses a binary file and one past max-blob-size, yet a tree listing offered blame for all of them, and so did a symlink's own page. Each row already knows its size, and git calls a file binary by its first 8000 bytes alone, which a stream reads without inflating the rest. With blame on, a listing of 2,000 delta-packed files went from about 11 to 15 ms.
8 days	Dump only the first 64 KB of a binary file	Bryce Kwon	-1/+18
8 days	Blame the previous revision under its own name	Bryce Kwon	-0/+21
8 days	Lead a blame page's folder crumbs to the tree	Bryce Kwon	-0/+16
8 days	Link snapshots of a slash ref by a dashed name	Bryce Kwon	-0/+19
	The snapshot page refuses to work a revision out of a name holding a slash, since that name becomes the top directory of the archive, so every link for a ref like release/2.0 answered 404. The ref now goes in the link as the id, and the archive unpacks into the repository's own prefix, as any snapshot asked for by id does.
8 days	Show a renamed file's diff as the rename	Bryce Kwon	-0/+75
	A diff limited to the new name cannot see the old one, so the diffstat's link for a renamed file, the commit page reached from that file's log, and the file's rawdiff and patch all showed every line as added. A path the old tree lacks is now diffed across the whole commit with rename detection aimed at it alone, the way git blame looks for a rename, so it is compared with the commit's deleted files and nothing else. Doing it in cgit_diff_tree keeps the log's counts for that commit in step with the page they link to. The rawdiff and patch pages leave the diff to git's own output, so for them that search finds the old name, and both names go into the limit with rename detection on.
9 days	Log the path of a repository that will not open	Bryce Kwon	-0/+14
	The 404 page names only the repository and nothing reached the log, so a mistyped repo.path left no trace of the path cgit had tried.
9 days	Read the description file without repo.desc	Bryce Kwon	-1/+28
	Only a scanned repository fell back to its description file, so one listed in cgitrc without repo.desc showed "[no description]" however its file read. repo.desc may follow repo.path, so the file is read where a page shows the description, which also spares every other request the reads.
9 days	Report a word where cgitrc expects a number	Bryce Kwon	-0/+36
	atoi reads "yes" or "true" as 0, so repo.hide=yes, or cgit.hide true in a scanned repository's git config, silently did nothing. The values keep that meaning, since honouring them now would hide repositories on upgrade, but each one is logged with its file and line.
9 days	Report a cgitrc or include that cannot be read	Bryce Kwon	-0/+37
	A missing or unreadable cgitrc left only "No repositories found" and an empty log, the commonest first mistake with no trace of its cause. A scanned repository's own cgitrc stays quiet, since most have none.
9 days	Keep a scan with a negative ttl for good	Bryce Kwon	-0/+21
	"The cache" promises that a negative ttl never expires, but no age was ever below a negative cache-scan-ttl, so every request started a background rescan.
9 days	List scanned repositories in path order	Bryce Kwon	-0/+27
	readdir hands entries back in whatever order the filesystem keeps them, so proj111 could come before proj105 and a section could start twice. section-sort is off by default to keep the order written in cgitrc, and a scan has none to keep.
9 days	Key the cached scan on every setting it uses	Bryce Kwon	-3/+19
	Two cgitrc files sharing a cache-root read one list, so strict-export and trust-scan-config set in one applied to the other, and a changed setting stayed stale until the list expired. The first request after an upgrade scans again, and the files under the old names are never read.
9 days	Drain the about filter in the config tests	Bryce Kwon	-2/+6
9 days	Check only what the racy filter tests can promise	Bryce Kwon	-3/+7
	Both tests passed or failed with the order in which cgit and the exec filter happened to run, about one run in four under UBSan.
9 days	Find a capitalised extension's lexer again	Bryce Kwon	-5/+12
	Scintillua's detect() matches an extension by its case, and the fallback e227d1f dropped had lowercased it, so MAIN.C and SETUP.PY lost their colour. The fake lexer now answers only for the suffixes it knows, as Scintillua does, which is what lets the check see it.
9 days	Test a lock won after its file became the slot	Bryce Kwon	-1/+29
9 days	Spell side-by-side in the test comments	Bryce Kwon	-3/+3
9 days	Write the remaining config copies with cgitrc_copy	Bryce Kwon	-12/+3
9 days	Move the feed link check in with the feed tests	Bryce Kwon	-6/+6
	It asks for a log page, and the index never carries a feed link.
9 days	Look for the old and new lines in one loop	Bryce Kwon	-11/+4
9 days	Write the diff and patch checks as the suite does	Bryce Kwon	-29/+29