cgit-70, branch v0.9.0.1

CGIT 0.9.0.1

2011-06-13T12:37:04+00:00

Signed-off-by: Lars Hjemli

ui-plain.c: fix html and links generated by print_dir() and print_dir_entry()

2011-06-12T21:21:30+00:00

This patch fixes the following issues:
* the base argument usually isn't zero-terminated, so printing base
  without considering baselen will usually generate random garbage
* when the current url represents a directory but doesn't end in a slash,
  relative urls would be incorrect
* using unescaped paths allows XSS

Signed-off-by: Lars Hjemli

scan-tree.c: avoid memory leak

2011-06-06T19:10:31+00:00

No references are kept to the memory pointed to by the 'rel' variable, so
it should be free()'d before returning from add_repo().

Signed-off-by: Jamie Couture 
Signed-off-by: Lars Hjemli

ui-log.c: do not link from age column

2011-06-02T10:30:26+00:00

The link url wasn't properly escaped, and since the link was identical
to the one used on the commit message it didn't serve any special purpose.

Signed-off-by: Lars Hjemli

ui-snapshot.c: remove debug cruft

2011-06-02T10:26:41+00:00

Signed-off-by: Lars Hjemli

Properly escape ampersands inside HTML attributes

2011-05-30T21:55:19+00:00

Ampersands ("&") appearing inside HTML attributes need to be translated
to "&". Otherwise, invalid XHTML will be generated at various
places, such as at tree views containing links to submodules.

Signed-off-by: Lukas Fleischer 
Signed-off-by: Lars Hjemli

fix virtual-root if script-name is ""

2011-05-23T21:20:59+00:00

In d0cb841 (Avoid trailing slash in virtual-root), virtual-root was set
from script-name using trim_end().  However, if script-name was the
empty string (""), which happens when cgit is used to serve the root
path on a domain (/), trim_end() returns NULL and cgit acts like
virtual-root is not available.  Now, set virtual-root to "" in this
case, which fixes this bug.

Signed-off-by: Lars Hjemli

ui-repolist.c: do not return random/stale data from read_agefile

2011-05-23T21:17:10+00:00

When git/date.c:parse_date() cannot parse its input it returns -1. But
read_agefile() checks if the result is different from zero, essentialy
returning random data from the date buffer when parsing fails. This
patch fixes the issue by verifying that the result from parse_date()
is positive.

Noticed-by: Julius Plenz 
Signed-off-by: Lars Hjemli

Avoid null pointer dereference in cgit_print_diff().

2011-05-23T20:58:35+00:00

When calling cgit_print_diff() with a bad new_rev and a NULL old_rev,
checking for new_rev's parent commit will result in a null pointer
dereference. Returning on an invalid commit before dereferencing fixes
this. Spotted with clang-analyzer.

Signed-off-by: Lukas Fleischer 
Signed-off-by: Lars Hjemli

Avoid null pointer dereference in reencode().

2011-05-23T20:58:35+00:00

Returning "*txt" if "txt" is a null pointer is a bad thing. Spotted with
clang-analyzer.

Signed-off-by: Lukas Fleischer 
Signed-off-by: Lars Hjemli