about summary refs log tree commit diff
path: root/COPYING
diff options
context:
space:
mode:
authorLukas Fleischer <cgit@cryptocrack.de>2015-01-15 19:47:42 +0100
committerJason A. Donenfeld <Jason@zx2c4.com>2015-01-15 19:48:44 +0100
commited7e3bc822856c30066a4ff0178033b22046fe96 (patch)
treed0cfb14346d8f14f5dbb0ae75fe5071013666b19 /COPYING
parentgit: update to v2.2.2 (diff)
downloadcgit-pink-ed7e3bc822856c30066a4ff0178033b22046fe96.tar.gz
cgit-pink-ed7e3bc822856c30066a4ff0178033b22046fe96.zip
Return proper HTTP response when accessing info/
Currently, when a user directly accesses the info command of a
repository, we exit cgit without printing anything to stdout, bringing
up error messages like "502 Bad Gateway" or "An error occurred while
reading CGI reply (no response received)". Instead of bailing out, at
least print the HTTP headers, including a reasonable error message.

Reported-by: Janus Troelsen
Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions
 

generated by cgit-pink 1.4.1 (git 2.36.1) at 2026-09-27 22:51:27 +0000


 


amp;follow=1'>mailmap: source before lighttpdJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17ui-shared: do not allow negative minutesJason A. Donenfeld

Do to timestamp differences, sometimes cgit would should "-0 min", which
doesn't make any sense.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17auth: document tweakables in lua scriptJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17repolist: make owner clickable to searchJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17ui-shared: move about tab all the way to the leftJason A. Donenfeld

There were no objections (at the time of committing this):
   http://lists.zx2c4.com/pipermail/cgit/2013-May/001393.html
   http://lists.zx2c4.com/pipermail/cgit/2014-January/001904.html

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17filter: don't forget to reap the auth filterJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17cgit.c: free tmp variableJason A. Donenfeld

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-17Switch to exclusively using global ctxLukas Fleischer

Drop the context parameter from the following functions (and all static
helpers used by them) and use the global context instead:

* cgit_print_http_headers()
* cgit_print_docstart()
* cgit_print_pageheader()

Remove context parameter from all commands

Drop the context parameter from the following functions (and all static
helpers used by them) and use the global context instead:

* cgit_get_cmd()
* All cgit command functions.
* cgit_clone_info()
* cgit_clone_objects()
* cgit_clone_head()
* cgit_print_plain()
* cgit_show_stats()

In initialization routines, use the global context variable instead of
passing a pointer around locally.

Remove callback data parameter for cache slots

This is no longer needed since the context is always read from the
global context variable.

Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>



2014-01-16auth: have cgit calculate login addressJason A. Donenfeld

This way we're sure to use virtual root, or any other strangeness
encountered.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16auth: lua string comparisons are time invariantJason A. Donenfeld

By default, strings are compared by hash, so we can remove this comment.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16authentication: use hidden form instead of refererJason A. Donenfeld

This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16auth: add basic authentication filter frameworkJason A. Donenfeld

This leverages the new lua support. See
filters/simple-authentication.lua for explaination of how this works.
There is also additional documentation in cgitrc.5.txt.

Though this is a cookie-based approach, cgit's caching mechanism is
preserved for authenticated pages.

Very plugable and extendable depending on user needs.

The sample script uses an HMAC-SHA1 based cookie to store the
currently logged in user, with an expiration date.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>



2014-01-16t0111: Additions and fixesLukas Fleischer

* Rename the capitalize-* filters to dump.* since they also dump the
  arguments.

* Add full argument validation to the email filters.

Signed-off-by: Lukas Fleischer <cgit@cryptocrack.de>



2014-01-16parsing.c: Remove leading space from committerLukas Fleischer