| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | filter: fix libravatar email-filter https issue•••Serving cgit via https and getting avatar via http gives error messages
about untrusted content. This decides whether or not to use https link
by looking at the environment variable HTTPS, which is set in CGI.
| Christian Hesse | 2014-12-13 | 1 | -1/+2 |
| * | remove trailing whitespaces from source files | Christian Hesse | 2014-04-17 | 1 | -18/+18 |
| * | filter: add libravatar email-filter lua script | Christian Hesse | 2014-03-13 | 1 | -0/+26 |
| * | simple-authentication: style•••Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-23 | 1 | -1/+1 |
| * | auth: document tweakables in lua script•••Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-17 | 1 | -0/+10 |
| * | auth: have cgit calculate login address•••This way we're sure to use virtual root, or any other strangeness
encountered.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-16 | 1 | -6/+1 |
| * | auth: lua string comparisons are time invariant•••By default, strings are compared by hash, so we can remove this comment.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-16 | 1 | -2/+2 |
| * | authentication: use hidden form instead of referer•••This also gives us some CSRF protection. Note that we make use of the
hmac to protect the redirect value.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-16 | 1 | -79/+121 |
| * | auth: add basic authentication filter framework•••This leverages the new lua support. See
filters/simple-authentication.lua for explaination of how this works.
There is also additional documentation in cgitrc.5.txt.
Though this is a cookie-based approach, cgit's caching mechanism is
preserved for authenticated pages.
Very plugable and extendable depending on user needs.
The sample script uses an HMAC-SHA1 based cookie to store the
currently logged in user, with an expiration date.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-16 | 1 | -0/+225 |
| * | email-gravatar: fix html syntax issues•••an attribute value specification must be an attribute value literal
unless SHORTTAG YES is specified
| Christian Hesse | 2014-01-15 | 2 | -2/+2 |
| * | email-gravatar: do not scale icons up•••Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-14 | 2 | -2/+2 |
| * | filter: allow returning exit code from filter•••Filters can now indicate a status back to cgit by means of the exit code
for exec, or the return value from close for Lua.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-14 | 1 | -0/+1 |
| * | email-gravatar: fix html syntax issues•••* make ampersand a html entity
* add required alt attribute
* add required img end tag
| Christian Hesse | 2014-01-14 | 2 | -2/+2 |
| * | email-gravatar.py: fix UTF-8 | Christian Hesse | 2014-01-14 | 1 | -0/+4 |
| * | email-gravatar.lua: fix for lua 5.2 | Christian Hesse | 2014-01-14 | 1 | -1/+1 |
| * | filter: add page source to email filter•••Since the email filter is called from lots of places, the script might
benefit from knowing the origin. That way it can modify its contents
and/or size depending.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-14 | 2 | -1/+3 |
| * | filter: add gravatar scripts•••The lua one is hugely faster than the python one, but both are included
for comparison.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2014-01-14 | 2 | -0/+58 |
| * | filters: Improved syntax-highlighting.py•••- Switched back to python2 according to a problem in pygments with python3.
With the next release of pygments this problem should be fixed.
Issue see here:
https://bitbucket.org/birkenfeld/pygments-main/issue/901/problems-with-python3
- Just read the stdin, decode it to utf-8 and ignore unknown signs. This ensures
that even destroyed files do not cause any errors in the filter.
- Improved language guessing:
-> At first use guess_lexer_for_filename for a better detection of the used
programming languages (even mixed cases will be detected, e.g. php + html).
-> If nothing was found look if there is a shebang and use guess_lexer.
-> As default/fallback choose TextLexer.
Signed-off-by: Stefan Tatschner <stefan@sevenbyte.org>
| Stefan Tatschner | 2014-01-13 | 1 | -19/+33 |
| * | Fix UTF-8 with syntax-highlighting.py•••Previously the script tried to encode output from Pygments with
the ASCII codec, which failed.
Signed-off-by: Přemysl Janouch <p.janouch@gmail.com>
| Přemysl Janouch | 2014-01-08 | 1 | -0/+1 |
| * | Fix about-formatting.sh•••dash failed to parse the script.
Signed-off-by: Přemysl Janouch <p.janouch@gmail.com>
| Přemysl Janouch | 2014-01-08 | 1 | -1/+1 |
| * | filters: highlight.sh: add css comments for highlight 2.6 and 3.8•••v2: add highlight 3.13 as present on Fedora 19
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
| Ferry Huberts | 2014-01-08 | 1 | -1/+63 |
| * | filters: toggle perl utf8 situation•••Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2013-05-28 | 1 | -4/+0 |
| * | filters: import more modern scripts•••Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| Jason A. Donenfeld | 2013-05-27 | 8 | -0/+1813 |
| * | syntax-highlighting.sh: Fix command injection.•••By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.
This patch adds simple argument quoting.
| Jason A. Donenfeld | 2012-10-27 | 1 | -2/+2 |
| * | syntax-highlight: when the file has no extension, assume text•••There are 2 situations:
1- empty extension: assuming text is better than highlight
producing no output because of a missing argument.
2- no extension at all: assuming text is better than setting
the extension to the filename, which is what now happens.
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
| Ferry Huberts | 2012-10-09 | 1 | -1/+4 |
| * | Revert "filters/syntax-highlighting.sh: work around highlight --force bug"•••This reverts commit f50be7fda0a7ab57009169dd5905fcbab8eb5166.
An update with the latest highlight landed in EPEL. This new version
doesn't have the --force bug, so the workaround can now be removed.
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
| Ferry Huberts | 2012-10-09 | 1 | -17/+0 |
| * | Merge branch 'stable' | Lars Hjemli | 2012-03-18 | 1 | -0/+28 |
| |\ |
|
| | * | filters/syntax-highlighting.sh: work around highlight --force bug | Ferry Huberts | 2012-03-18 | 1 | -0/+17 |
| | * | filters/highlight.sh: manually support highlight version 2 and 3 | Ferry Huberts | 2012-03-18 | 1 | -0/+11 |
| * | | commit-links.sh: improve regular expressions•••The default length for sha1 abbreviations in git is 7.
A '#num' at the beginning of the commit message is now
recognised, a ':#num' as well, etc.: a '#num' anywhere
is now converted to a link.
Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
| Ferry Huberts | 2011-07-19 | 1 | -2/+5 |
| * | | filters: document environment variables in filter scripts•••Signed-off-by: Ferry Huberts <ferry.huberts@pelagic.nl>
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
| Ferry Huberts | 2011-03-26 | 2 | -0/+22 |
| |/ |
|
| * | commit-links.sh: Seperate the expressions for filtering commit messages.•••This allows for putting descriptions closer to their expressions. It
should also make it clearer how to apply an expression conditionally.
| Jeff Smith | 2010-07-22 | 1 | -7/+9 |
| * | syntax highlighting for all formats supported by "highlight"•••The highlight tool can be given any of the supported file extensions
as its -S parameter. This patch replaces the case-switch by extracting
the extension from the supplied file name and passing it to highlight.
However, this requires a shell supporting the ${var##pattern} syntax,
like dash or bash.
Unknown extensions cause a fall-back to plain text using the --force
switch. Error messages are redirected to /dev/null.
A special case maps Makefile and Makefile.* to the "mk" extension.
The total overhead is reduced by calling "exec highlight". No forks are
needed during script execution.
Signed-off-by: Georg Lukas <georg@op-co.de>
| Georg Lukas | 2009-11-19 | 1 | -17/+12 |
| * | Add some example filter scripts•••Signed-off-by: Lars Hjemli <hjemli@gmail.com>
| Lars Hjemli | 2009-08-09 | 2 | -0/+51 |
