Commit Briefs

Stefan Sperling

gotwebd.conf should Xr gotwebd, not gotweb


Stefan Sperling

initial pass over gotwebd docs

tracey is fine with gotwebd.8 but gotweb.conf.5 still needs some work


Stefan Sperling

allow multiple "listen on" statements per server in gotwebd.conf

ok tracey


Stefan Sperling

change gotwebd.conf fcgi socket syntax to "listen on 'foo' port 'bar'"

ok op@


Omar Polo

gotwebd: fix NULL deref on ENOMEM in gotweb_process_request

ok tracey@


Omar Polo

gotwebd: fix memory leak introduced in d927f8c

ok tracey@


Josh Rickmar

don't create signed tag objects with trailing NUL

Although Git itself did not care, the superfluous NUL at the end of the tag object was breaking GitHub's SSH signature detection. ok stsp@


Omar Polo

gotwebd: add CSP policy

ok tracey@


Omar Polo

gotwebd: fix for possible NULL beign passed to fcgi_printf

reported by and ok tracey@


Omar Polo

gotwebd: make sure to escape possibly unsafe strings

this fixes only the HTML escaping of strings, the urlencode is still missig. while here also plug a memory leak in gotweb_render_branches and drop some needless ternary operators. ok tracey@


Omar Polo

gotwebd: minor tweaks to the generated HTML

spotted by validator.w3.org: - use target="_blank" instead of `_sotd' - drop `alt' attributes in `a' tags This fixes all the errors reported; only a warning suggesting to add a `lang' attribute on the <html> tag remains.


Stefan Sperling

mark functions internally used by sockets.c as static

ok tracey


Stefan Sperling

fix previous: store port number in host byte order, convert for struct sockaddr

With the previous patch the listen port was correct, but the debug log output was still displaying the swapped port number. Now both listen behaviour and debug log output agree.


Stefan Sperling

fix gotwebd default fcgi listen port byte-order (port 10275 -> port 9000)

ok tracey


Stefan Sperling

gotwebd: listen on localhost only by default

ok tracey