Age	Commit message (Collapse)	Author	Lines
2 days	Show a blob at exactly max-blob-size	Bryce Kwon	-0/+14
	No fixture's size in whole kilobytes equalled the limit, so turning the comparison into greater or equal passed every test.
2 days	Test a followed single-file diff against the cap	Bryce Kwon	-5/+20
	Follow empties the prefix, and the cap has to come from the path asked for, as the source warns. Only the line cap can show that. The pairs are filtered before they are counted, so a single-file page counts one file whatever the cap, and a followed check under max-diff-files could never fail.
2 days	Test every setting in the scan cache key	Bryce Kwon	-0/+94
	Only strict-export and the global filters were ever varied against one cache-root, so dropping any of the other inputs passed. Leaving out trust-scan-config is the one that matters most. A list scanned under it carries the filters pushers set, the list is read back with no trust check, and a site that does not trust its scans would run them.
2 days	Read back the list a stale lock file could spoil	Bryce Kwon	-9/+14
	The scan half grepped the page of the request that rebuilt the list, and that page is drawn from the scan in memory, so the ghost could never show there. Had the truncate moved out of cache_lock_file, every later read of the list would have taken in the stale tail and the test would still have passed.
2 days	Test that only full ids take the static ttl	Bryce Kwon	-0/+25
	Nothing requested a page pinned to an id with the static ttl in force, so dropping the full id check would cache a page pinned to master or an abbreviation for ever and the suite would pass.
2 days	Prove one cache slot keeps its pages apart	Bryce Kwon	-21/+38
	The one-slot test threw every response away, so a slot that stopped comparing keys and served whatever page it held still left one file and passed. The collision MANUAL promises to log was never checked either. The size tests also rewrote the shared cgitrc in place, and the listing replay held only while the dynamic ttl did.
2 days	Name the build a test run is testing	Bryce Kwon	-1/+7
	After tools/build-development.sh or build-release.sh, a plain make test quietly rebuilt without the sanitizers or the hardening and tested that binary instead, with nothing in its output to say so.
2 days	Test the preview server's request handling	Bryce Kwon	-4/+227
	Only split_cgi_output was ever run. The handler, which builds the CGI environment, guards the asset directory, caps the body, times cgit out, turns a failed run into a 500 and answers HEAD, ran in no test at all. The server listens on a port the system picks, so parallel runs cannot collide.
2 days	Report each preview server split case on its own	Bryce Kwon	-53/+77
	The five cases ran as one test, and their names reached the log only with -v. python3 also ran under the trash directory's HOME, where a version manager's shim may find no interpreter, and without -I, so PYTHONPATH or the user's site packages could shadow a module.
2 days	Make the home access test see a rendered page	Bryce Kwon	-2/+18
	Nothing checked that the traced request worked, and one that failed early opened fewer files and passed. cgit unsets HOME, so a read that fell back on the account's entry in the password database would name that home rather than the missing one the test set. Under Valgrind every test would have failed, as strace follows valgrind into the .valgrindrc it reads from the home directory.
2 days	Validate only pages that rendered in t0002	Bryce Kwon	-11/+26
	test_url failed only on tidy's own errors, so a 404 or a 500 page in place of the stats or the blame page validated as well as the real one, and an empty body drew no more than warnings.
2 days	Show the Git version checks as skipped, not passed	Bryce Kwon	-22/+20
	CGIT_TEST_NO_GIT_VERSION ended t0001 before the test library started, so it wrote no counts and printed nothing. Without vendor/git/.git the submodule check passed with a note on stderr, which is the case for a tree from get-git or git archive, so the pin was checked nowhere.
2 days	Check the Lua-less build through the helpers	Bryce Kwon	-15/+17
	t0006 ran build/nolua/cgit by its path, so Valgrind never saw it, and its page checks passed a page that logged an error. The Makefile and README said the suite runs both binaries the same way, though only these four tests run the one without Lua.
2 days	Keep cgit under Valgrind whichever way it is asked	Bryce Kwon	-11/+40
	The library runs a script again for --tee, --verbose-log and --stress with the arguments setup.sh left it, and --valgrind was no longer among them, so -V --valgrind ran cgit bare. --valgrind=<tool> reached the library instead, which then wrapped every Git command and left cgit alone. --valgrind-only is refused, as it would need the library's own per-test switching.
2 days	Let a test run require the tools it must not skip	Bryce Kwon	-23/+39
	Nothing could make a missing prerequisite fail. A host without pkg-config builds without Lua, and make test then passed with every Lua test skipped and the lua pass of t0201 never run. The whole-script skips become named prerequisites so the same list covers them, and the strace probe now traces the file class of calls the tests use, so an strace too old for it skips rather than fails.
2 days	Fail a test script that leaves a sanitizer report	Bryce Kwon	-0/+42
	Without -v a report went to /dev/null with the rest of stderr, and one from a process whose status a pipeline or a background job loses failed nothing at all.
2 days	Put a time limit on each request in the tests	Bryce Kwon	-1/+4
	A regression that blocked, such as a lock never let go or a filter that never returns, hung make test rather than failing it. The alarm is set in Perl, which the test library already wants for its chain lint, since a pending alarm survives the exec into cgit.
2 days	Stop marking setup.sh as executable	Bryce Kwon	-0/+0
	It is only ever sourced, as extensions/lib.sh is.
2 days	Leave no stray variables or globs from setup.sh	Bryce Kwon	-4/+9
	The arguments were split back apart with globbing on, so one that matched a file in tests/ reached the library as that file's name.
2 days	Correct the comments on the test plumbing	Bryce Kwon	-3/+10
	cgit_rc keeps its name, close as it is to cgitrc_repo and cgitrc_copy, since every script calls it, so a comment now says what it runs.
2 days	Clean a trash directory a stopped test locked	Bryce Kwon	-0/+3
	A script stopped by -i or --debug inside one of the SANITY tests leaves a directory without permissions, and make clean then failed on it.
2 days	Run every test script and sum up the results	Bryce Kwon	-5/+79
	make stopped at the first failing script and left every later one unrun. Each script's closing line also counts its skipped tests as passes, so a run that skipped half the suite read like a full one, and the counts the library writes for each script were never read.
2 days	Keep the test results where the library puts them	Bryce Kwon	-8/+1
	Only the counts were re-pointed at results/. The --tee, --verbose-log and --stress logs, the leak logs and the counts of a script skipped through GIT_SKIP_TESTS still went to test-results/, which nothing ignored or cleaned, so a summary read from one place would miss them.
2 days	Pin what the test library reads from the shell	Bryce Kwon	-2/+9
	An exported TEST_OUTPUT_DIRECTORY made every script bail out, and an exported GIT_TEST_DEFAULT_INITIAL_BRANCH_NAME=main failed t0102.
2 days	Add a request helper that checks the answer	Bryce Kwon	-0/+47
	cgit exits 0 whatever goes wrong, and a die after the headers leaves a page cut short behind a 200 status, so cgit_rc and its siblings pass any page that does not crash. Only 71 of the 337 tests that request a page checked a status line. cgit_ok also wants an empty stderr and, for HTML, the closing tag. cgit_ok_url renders afresh with the page cache off, since the shared config caches a page under its request alone.
2 days	Fail where a test fixture breaks	Bryce Kwon	-24/+29
	mkrepo had no && chain, so a failed add or commit went unnoticed and every mkrepo call in the tests passed on a broken repository. The shared fixtures were built the same way. They are still built when setup.sh is sourced, so --run can pick out any test, but a failure now stops the run where it broke.
2 days	Stop the run when cgit cannot report its build	Bryce Kwon	-4/+23
	The Lua probe piped cgit --version into grep, so a crash there, or a change of wording, turned every Lua test into a skip and the run still passed. The answer is now also held against the flags the binary was built with in build/CGIT-CFLAGS.
2 days	Keep the developer's environment out of the tests	Bryce Kwon	-0/+15
	The test library clears only Git's variables, so a CGI variable or CGIT_SCINTILLUA_PATH exported in the shell reached every request, and NO_HTTP alone strips every header. LUA_INIT runs code in each standalone interpreter. The umask is pinned so files the tests create get the same modes everywhere.
3 days	Fetch avatar icons without a Referer	Bryce Kwon	-0/+1
	The icons came from Gravatar or Libravatar with the page's url as the Referer, so the service learned which repositories and commits each visitor looked at.
3 days	Cut the nginx config down to a generic drop-in	Bryce Kwon	-16/+2
	The old file was a complete nginx.conf with TLS, compression, catch-all hosts and security headers, and it had to be taken apart before it ran beside a distribution's own nginx.conf. A server block included from the http block leaves the user, the MIME types and the logs to the distribution. Its header gives one default path per thing, adjusted where a system differs, which leaves packagers a plain base to adapt rather than a table for each distribution. HTTPS and git-http-backend are commented examples, so the file serves plain HTTP as shipped. The backend takes only the three smart HTTP paths at cgit's own repository urls, so every page still reaches cgit. git refuses a repository another user owns, which failed every clone until safe.directory was set for the backend, and a 3 MB push got 413 until the location lifted nginx's body limit. The split empties SCRIPT_NAME because a second SCRIPT_NAME after the include reaches fcgiwrap as well, and cgit reads the first one, which put every link under the request path. cgit sends nosniff and a locked policy on raw output itself, so the configs no longer carry one. The t0004 check that all three agree goes here, with the first of them to drop it.
4 days	Let a keyboard scroll the stats table	Bryce Kwon	-0/+6
	It scrolls sideways like the hex dump, with nothing inside a keyboard can reach, so it takes focus and the shared focus ring the same way.
4 days	Name a pinned commit with the page in the title	Bryce Kwon	-0/+13
4 days	Let a keyboard scroll the hex dump	Bryce Kwon	-1/+10
	Chrome and Firefox already let an overflowing box take focus, with their own ring, but WebKit does not. The table takes focus on a mouse click as well, where focus-visible keeps the ring off.
4 days	Read the file and diff tables as layout	Bryce Kwon	-0/+12
	The file view's table only sets the line numbers beside the code, and the unified diff's is a single cell holding every file.
4 days	Read the login form table as layout	Bryce Kwon	-0/+1
4 days	Say which index column is sorted	Bryce Kwon	-0/+13
5 days	Put a Lua filter's print output where it runs	Bryce Kwon	-0/+20
	LuaJIT and Lua 5.1 leave print's line in stdio's buffer until cgit exits, after the end of the page.
5 days	Report a snapshot format name that matches nothing	Bryce Kwon	-0/+19
5 days	Answer an empty repository's feed with a feed	Bryce Kwon	-0/+19
5 days	Keep a repository's own settings in a cached scan	Bryce Kwon	-0/+47
	A scanned repository is read back from the cached list under the global settings, so a setting that only differed from them by being off, or by naming the default value, came back as the global one. branch-sort was written only for age, per-path module links not at all, and a filter a repository turned off left no line behind. Writing an empty value for a filter turned off makes the list depend on whether each global filter is set, so the scan key names that too.
5 days	Keep the placeholder out of a cached scan	Bryce Kwon	-0/+12
	The cached list wrote "[no description]" like any other description, so once read back it no longer counted as the placeholder and became the meta description of every repository without one. Repositories read back from the list are also marked as having had their description file read, since the scan already did, so the index does not open those files again on every request.
5 days	Leave the scan uncached with a negative cache-size	Bryce Kwon	-0/+15
	The page cache counts a cache-size of 0 or less as off, but scan-path cached its list for any value other than 0, so a negative one still wrote a list into cache-root.
7 days	Name a missing Lua module in the error log	Bryce Kwon	-5/+25
7 days	Log failed logins	Bryce Kwon	-0/+7
	The login posts outside any repository, so the log line names the repository by the page its signed way back leads to.
7 days	Say that logging in needs https	Bryce Kwon	-1/+12
	Only HTTPS=on counts, the same test cgit makes before it writes an https link of its own.
7 days	Tell a signed-in visitor they have no access	Bryce Kwon	-0/+7
7 days	Say when logins are unavailable	Bryce Kwon	-3/+40
	The way back was signed part way through the form, so while the secret's directory did not exist, or a library was missing, cgit's error landed inside the hidden input and the page broke off there with no fields.
7 days	Keep counting across a split ordered list	Bryce Kwon	-0/+7
8 days	Keep the login page out of search indexes	Bryce Kwon	-0/+14
8 days	Keep a protected repository's header to itself	Bryce Kwon	-0/+28
	The login page stands in for any page of the repository, so it named the description and owner of one the visitor may not see, including one hidden from the index. The site's own description fills the line, as on the index, so the header keeps its height.