core/appview/repo/ at 07b1cbdbd9f7b49f158e463f97bc52e7bf712d68 · tangled.org/core · Tangled

tangled.org / core

5

Monorepo for Tangled tangled.org

5

core / appview / repo /

at 07b1cbdbd9f7b49f158e463f97bc52e7bf712d68 20 files

oppiliappan appview/{issues,pulls,repo}: populate recent links on visit 3w ago

appview/{issues,pulls,repo}: populate recent links on visit Signed-off-by: oppiliappan <me@oppi.li>

3 weeks ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

appview/repo: fallback to octet-stream for all unsupported media types Fix: <https://tangled.org/tangled.org/core/issues/552> Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

appview/repo/blob.go: fix XSS via raw blob endpoint Replace the image/ prefix match with an explicit allowlist of safe binary MIME types. SVG is intentionally excluded as it supports embedded scripts. Normalize the knot-supplied Content-Type with mime.ParseMediaType before classification to strip parameters and prevent bypass attempts. Add X-Content-Type-Options: nosniff as defence-in-depth. Add tests covering the allowlist invariants and the normalization behaviour. Signed-off-by: Matías Insaurralde <matias@insaurral.de>

2 months ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

appview/{issues,pulls,repo}: populate recent links on visit Signed-off-by: oppiliappan <me@oppi.li>

3 weeks ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

appview: update appview repo_language cache when loading index page Updating only on `refUpdate` event is unstable. Signed-off-by: Seongmin Lee <git@boltless.me>

4 weeks ago

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

rawdiff_test.go

appview/repo: serve .diff and .patch for commits Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

2 months ago

knotmirror,spindle,appview: propagate repo rename across services Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

appview: read permissions thru knotacl service Lewis: May this revision serve well! <lewis@tangled.org>

3 weeks ago

appview/pipelines: key by repoDid in all queries no more owner/repo! Signed-off-by: oppiliappan <me@oppi.li>

1 month ago

appview: read permissions thru knotacl service Lewis: May this revision serve well! <lewis@tangled.org>

3 weeks ago

appview: read permissions thru knotacl service Lewis: May this revision serve well! <lewis@tangled.org>

3 weeks ago

knotmirror: temp git xrpc to use repodid Lewis: May this revision serve well! <lewis@tangled.org>

1 month ago

appview/pages/markup: fix readme detection for directories and unsupported formats - IsReadmeFile now takes (name, mode) and only matches regular file blobs (filemode.Regular/Executable). A directory or symlink named "readme" was being picked up by tree handlers, which then tried to fetch its blob and 503'd. - ReadmePattern matches by convention (^readme(?:[._-].+)?$) rather than a fixed extension set. README.rst, README.org, README-old, etc. now surface on index/tree pages and fall through to FormatText in GetFormat for plaintext rendering. - pages.RepoIndex and pages.RepoTree route through markup.GetFormat instead of hardcoded extension switches, so the markdown extension list lives in one place (FileTypePatterns[FormatMarkdown]). - Added format_test.go covering IsReadmeFile (mode/symlink/dir rejection, the directory regression), FileTypePatterns, and GetFormat. Signed-off-by: Evan Jarrett <evan@evanjarrett.com>

1 month ago

appview: handlers, state, and templates for more record types w/ repoDID Lewis: May this revision serve well! <lewis@tangled.org> appview,knotserver: validate git repo ownership according to knot Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago