cgit-70, branch cgit-70_v0.1.2.1 a fork of cgit with a Gopher interface merging upstream 1.2.1 2018-08-06T11:23:51+00:00 KatolaZ katolaz@freaknet.org 2018-08-06T11:23:51+00:00 7fd094820d26cade130638a57847f20acb4ebe62 






Merge remote-tracking branch 'upstream/master' into upstream
2018-08-06T11:16:09+00:00

KatolaZ
katolaz@freaknet.org

2018-08-06T11:16:09+00:00

fcc9b201ea499a424b3bda8c504c7beb7e0ec0bd












added readme stuff
2018-08-06T11:10:36+00:00

KatolaZ
katolaz@freaknet.org

2018-08-06T11:10:36+00:00

3f675fb1c087228111bf76b9d4ac7ef0ba18d153












Bump version.
2018-08-03T15:04:03+00:00

Jason A. Donenfeld
Jason@zx2c4.com

2018-08-03T14:26:14+00:00

824138e59194acaf5efe53690d4ef6eaf38e1549

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>





Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>







clone: fix directory traversal
2018-08-03T15:04:03+00:00

Jason A. Donenfeld
Jason@zx2c4.com

2018-08-03T13:46:11+00:00

53efaf30b50f095cad8c160488c74bba3e3b2680

This was introduced in the initial version of this code, way back when
in 2008.

$ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd
root:x:0:0:root:/root:/bin/sh
...

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Reported-by: Jann Horn <jannh@google.com>





This was introduced in the initial version of this code, way back when
in 2008.

$ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd
root:x:0:0:root:/root:/bin/sh
...

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Reported-by: Jann Horn <jannh@google.com>







config: record repo.snapshot-prefix in the per-repo config
2018-08-03T14:12:21+00:00

Konstantin Ryabitsev
konstantin@linuxfoundation.org

2018-07-17T16:38:22+00:00

c679d9010451b986bae719a6abe0458af2b2dfb9

Even if we find snapshot-prefix in the repo configuration, we are not
writing it out into the rc- file, so setting the value does not have any
effect.

Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org>





Even if we find snapshot-prefix in the repo configuration, we are not
writing it out into the rc- file, so setting the value does not have any
effect.

Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org>







auth-filters: add simple file-based authentication scheme
2018-08-03T14:12:21+00:00

Jason A. Donenfeld
Jason@zx2c4.com

2018-07-15T02:45:11+00:00

77b6f833441dda1dd50f5a51a81036b1fde815d5

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>





Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>







added README_70
2018-08-02T09:19:37+00:00

KatolaZ
katolaz@freaknet.org

2018-08-02T09:19:37+00:00

f7c45be70147b8b477ce27bd5f09370d70d35b9a












fixed dir entries in tree view
2018-08-01T10:42:15+00:00

KatolaZ
katolaz@freaknet.org

2018-08-01T10:42:15+00:00

bd650dd4ecc96cebf067f9d716c7f597ecdb74c5












fixed selector for repo page
2018-07-31T10:11:21+00:00

KatolaZ
katolaz@freaknet.org

2018-07-31T10:11:21+00:00

d45de4dd4558be1db607f3315ddecf4814f37ba2