Commit Briefs
template: drop tmpl.c from SRCS
was added there mistakenly. it's not part of the "compiler", it's part of the "user library" and provides useful functions for the consumers.
gotwebd: urlencode also the double quote character
URLs are embedded as part of the HTML and, while it seems legal from RFC3986 to leave that character unquoted, we need it quoted to avoid breaking the HTML output. ok tracey@
gotwebd: templateify gotweb_render_tree
ok tracey@
gotwebd: css: fix horizontal overflow in blob and blame pages
spotted by + "looks good" tracey@
gotwebd: render BLOB inline, add BLOBRAW for serving raw blobs
binary blobs are automatically redirected to the BLOBRAW page (which is the old BLOB.) ok jamske
revoke filesystem access in gotd listen process via unveil(2)
This should avoid involuntary use of bind(2) with arbitrary socket paths. ok op@
expose 'gotctl info' output only to the root user
Now that anyone can connect to the socket, it is probably safer to expose information about currently connected clients only to root.
gotwebd.conf: use `listen on socket' syntax for UNIX sockets too
and drop unix_socket and unix_socket_path in server context. ok stsp@
remove the gotsh group requirement from gotd; any user can now connect
Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op
gotwebd: rework got_output_file_blob, no functional change
can now use got_object_blob_is_binary to simplify the logic. ok stsp@