git/gitweb/README, branch v1.6.2

Merge branch 'maint'

2009-02-09T06:07:53Z

* maint: gitweb: add $prevent_xss option to prevent XSS by repository content rev-list: fix showing distance when using --bisect-all

gitweb: add $prevent_xss option to prevent XSS by repository content

2009-02-09T05:51:25Z

Add a gitweb configuration variable $prevent_xss that disables features to prevent content in repositories from launching cross-site scripting (XSS) attacks in the gitweb domain. Currently, this option makes gitweb ignore README.html (a better solution may be worked out in the future) and serve a blob_plain file of an untrusted type with "Content-Disposition: attachment", which tells the browser not to show the file at its original URL. The XSS prevention is currently off by default. Signed-off-by: Matt McCutchen Signed-off-by: Junio C Hamano

gitweb: Update README that gitweb works better with PATH_INFO

2009-02-02T02:33:51Z

One had to configure gitweb for it to find static files (stylesheets, images) when using path_info URLs. Now that it is not necessary thanks to adding BASE element to HTML head if needed, update README to reflect this fact. Signed-off-by: Jakub Narebski Signed-off-by: Junio C Hamano

gitweb: webserver config for PATH_INFO

2009-01-31T05:08:30Z

Document some possible Apache configurations when the path_info feature is enabled in gitweb. Signed-off-by: Giuseppe Bilotta Acked-by: Jakub Narebski Signed-off-by: Junio C Hamano

gitweb: More about how gitweb gets 'owner' of repository

2008-07-27T21:14:01Z

Signed-off-by: Jakub Narebski Acked-by: Petr Baudis Signed-off-by: Junio C Hamano

gitweb: Describe projects_index format in more detail

2008-07-07T23:35:00Z

Update and extend information about $projects_list file format in gitweb/README and in gitweb/INSTALL. Signed-off-by: Jakub Narebski Signed-off-by: Junio C Hamano

gitweb setup instruction: rewrite HEAD and root as well

2008-06-08T20:46:37Z

Also add a few more hints for how to setup and configure gitweb as described [jc: with a fix from Mike Hommey] Signed-off-by: Junio C Hamano

Spelling fixes in the gitweb documentation

2008-04-22T06:18:06Z

Mostly spelling and grammar nits. Signed-off-by: Rafael Garcia-Suarez Signed-off-by: Junio C Hamano

gitweb: fallback to system-wide config file if default config does not exist

2008-03-27T20:55:10Z

From a distribution point of view, configuration files for applications should reside in /etc/. On the other hand it's convenient for multiple instances of gitweb (e.g. virtual web servers on a single machine) to have a per-instance configuration file, just as gitweb currently supports through the file gitweb_config.perl next to the cgi. To support both at runtime, this commit introduces GITWEB_CONFIG_SYSTEM as a system-wide configuration file which will be used as a fallback if the config file sprecified throug GITWEB_CONFIG does not exist. See also http://bugs.debian.org/450592 Signed-off-by: Gerrit Pape Acked-by: Jakub Narebski Signed-off-by: Junio C Hamano

gitweb: Use the config file to set repository owner's name.

2008-02-10T07:37:03Z

Now gitweb checks if gitweb.owner exists before trying to get filesystem's owner. Allow to use configuration variable gitweb.owner set the repository owner, it checks the gitweb.owner, if not set it uses filesystem directory's owner. Useful when we don't want to maintain project list file, and all repository directories have to have the same owner (for example when the same SSH account is shared for all projects, using ssh_acl to control access instead). Signed-off-by: Bruno Ribas Signed-off-by: Junio C Hamano