cgit/ui-repolist.c, branch master

cgit: truncate all config values at the newline

2026-05-04T16:28:27Z

These would be largely invalid anyway (save, I suppose, for Linux file paths that technically can contain new lines). The actual problem is that these get printed back out into cached -- and trusted -- cgitrc files, and if the fields have newlines, the git-config way of less trusted users configuring repos on a shared system can be abused to inject newlines, which then can be used to smuggle global options (including filters, which execute code) into the cached cgitrc. So now, only ever duplicate up to the newline, when dealing with these inputs. Reported-by: Adrian Denkiewicz Signed-off-by: Jason A. Donenfeld

ui-repolist,ui-shared: remove redundant title on repo anchors

2022-12-19T15:13:24Z

The title attribute was being set to the same value as the anchor element text. Signed-off-by: Chris Mayo Reviewed-by: Eric Wong Reviewed-by: Petr Vorel Signed-off-by: Jason A. Donenfeld

ui-repolist: do not return unsigned (negative) value

2019-11-22T12:35:50Z

The function read_agefile() returns time_t, which is a signed datatime. We should not return unsigned (negative) value here. Reported-by: Johannes Stezenbach Signed-off-by: Christian Hesse

global: make 'char *path' const where possible

2019-06-05T13:37:49Z

Signed-off-by: Christian Hesse

global: remove functionality we deprecated for cgit v1.0

2018-06-27T16:13:03Z

The man page states these were deprecated for v1.0. We are past v1.1, so remove the functionality. Signed-off-by: Christian Hesse Reviewed-by: John Keeping

html: html_ntxt with no ellipsis

2017-10-03T18:19:34Z

For implementing a ui-blame page, there is need for a function that outputs a selection from a block of text, transformed for HTML output, but with no further modifications or additions. Signed-off-by: Jeff Smith Reviewed-by: John Keeping

Remove unused variable from sort_section()

2017-04-05T04:38:39Z

Signed-off-by: Lukas Fleischer

ui-repolist: properly sort by age

2017-03-30T11:19:54Z

When empty repos exist, comparing them against an existing repo with a good mtime might, with particular qsort implementations, not sort correctly, because of this brokenness: if (get_repo_modtime(r1, &t) && get_repo_modtime(r2, &t)) However, sorting by the age column works as expected, so anyway, to tidy things up, we simply reuse that function. Signed-off-by: Jason A. Donenfeld

css: highlight even table rows and skip empty rows

2016-11-23T04:20:42Z

This is stolen from kernel.org css [0]. [0] https://git.kernel.org/cgit-korg-0.10.1.css

ui-repolist: fix memory leak

2016-10-12T12:13:10Z