{"shas":[["bee6ea17a1bab824eba6133eefc3c70b219ec98c","a6a1517a087f9f64a72f41a0de57ff01fbb0e412@gmail.com","gitweb: Fix usability of $prevent_xss\n\nWith XSS prevention on (enabled using $prevent_xss), blobs\n('blob_plain') of all types except a few known safe ones are served\nwith \"Content-Disposition: attachment\".  However the check was too\nstrict; it didn't take into account optional parameter attributes,\n\n  media-type     = type \"/\" subtype *( \";\" parameter )\n\nas described in RFC 2616\n\n  http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.17\n  http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.7\n\nThis fixes that, and it for example treats following as safe MIME\nmedia type:\n\n  text/plain; charset=utf-8\n\nSigned-off-by: Jakub Narebski <jnareb@gmail.com>\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Jakub Narebski"],["6c92972d7f5ab247a8cab5e4b88cb281bf201970","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'bc/maint-status-z-to-use-porcelain'\n\n* bc/maint-status-z-to-use-porcelain:\n  builtin/commit.c: set status_format _after_ option parsing\n  t7508: demonstrate status's failure to use --porcelain format with -z\n\nConflicts:\n\tbuiltin/commit.c","Junio C Hamano"],["456a4c08b8d8ddefda939014c15877ace3e3f499","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'jk/diff-not-so-quick'\n\n* jk/diff-not-so-quick:\n  diff: futureproof \"stop feeding the backend early\" logic\n  diff_tree: disable QUICK optimization with diff filter\n\nConflicts:\n\tdiff.c","Junio C Hamano"],["eca4f3b1af1d4ffe27aba65b1abb24df487eaf38","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'jn/gitweb-docs'\n\n* jn/gitweb-docs:\n  gitweb: Move \"Requirements\" up in gitweb/INSTALL\n  gitweb: Describe CSSMIN and JSMIN in gitweb/INSTALL\n  gitweb: Move information about installation from README to INSTALL","Junio C Hamano"],["2c6b5d88287689e5a1acd5b5fefb8edd96931b6d","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'jn/mime-type-with-params'\n\n* jn/mime-type-with-params:\n  gitweb: Fix usability of $prevent_xss","Junio C Hamano"],["038e2e5656b13058bc9596ef44647e190e96e493","053ce55f4869b7f450d1d77b8f162c6f2bb9e137@gmail.com","t3703: skip more tests using colons in file names on Windows\n\nUse the same test and prerequisite as introduced in similar\nfix in 650af7ae8bdf92bd92df2.\n\nSigned-off-by: Alex Riesen <raa.lkml@gmail.com>\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Alex Riesen"],["8fba5f985263efd46e94f392ce618de6adc1c3d5","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'jc/magic-pathspec'\n\n* jc/magic-pathspec:\n  t3703: skip more tests using colons in file names on Windows","Junio C Hamano"],["d8ead15963890a42f99fd0e7f3192b55cacd9404","1cd02e31b43620d7c664e038ca42a060d61727b9@meyering.net","fetch: do not leak a refspec\n\nSigned-off-by: Jim Meyering <meyering@redhat.com>\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Jim Meyering"],["d64a09fe223cec5535aec246dba87ec24d0158bb","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Merge branch 'maint'\n\n* maint:\n  fetch: do not leak a refspec","Junio C Hamano"],["2cbd969bcfef26b32c78bfbe475ce0ad9646ea06","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Git 1.7.6-rc1\n\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Junio C Hamano"],["2c162b56f370f5c33e6a945e6922d598006c5ec4","b57189c5f2fd5b3daf3350a77fde90def1080fa5@gmail.com","gitweb: do not misparse nonnumeric content tag files that contain a digit\n\nv1.7.6-rc0~27^2~4 (gitweb: Change the way \"content tags\" ('ctags') are\nhandled, 2011-04-29) tried to make gitweb's tag cloud feature more\nintuitive for webmasters by checking whether the ctags/<label> under\na project's .git dir contains a number (representing the strength of\nassociation to <label>) before treating it as one.\n\nWith that change, after putting '$feature{'ctags'}{'default'} = [1];'\nin your $GITWEB_CONFIG, you could do\n\n\techo Linux >.git/ctags/linux\n\nand gitweb would treat that as a request to tag the current repository\nwith the Linux tag, instead of the previous behavior of writing an\nerror page embedded in the projects list that triggers error messages\nfrom Chromium and Firefox about malformed XML.\n\nUnfortunately the pattern (\\d+) used to match numbers is too loose,\nand the \"XML declaration allowed only at the start of the document\"\nerror can still be experienced if you write \"Linux-2.6\" in place of\n\"Linux\" in the example above.  Fix it by tightening the pattern to\n^\\d+$.\n\nSigned-off-by: Jonathan Nieder <jrnieder@gmail.com>\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Jonathan Nieder"],["302bd999fd0ef41f3605a2212c23f54ae43649f8","a6723cc3f76163bf7adb636a73ac3b0ceb3e6b9b@pobox.com","Git 1.7.6-rc2\n\nSigned-off-by: Junio C Hamano <gitster@pobox.com>","Junio C Hamano"],["36896ea55ebece776c82328d8613f07fe7576d60","a6a1517a087f9f64a72f41a0de57ff01fbb0e412@gmail.com","Merge branch 'master' of git://git.kernel.org/pub/scm/git/git\n\n* 'master' of git://git.kernel.org/pub/scm/git/git:\n  Git 1.7.6-rc2\n  gitweb: do not misparse nonnumeric content tag files that contain a digit\n  Git 1.7.6-rc1\n  fetch: do not leak a refspec\n  t3703: skip more tests using colons in file names on Windows\n  gitweb: Fix usability of $prevent_xss\n  gitweb: Move \"Requirements\" up in gitweb/INSTALL\n  gitweb: Describe CSSMIN and JSMIN in gitweb/INSTALL\n  gitweb: Move information about installation from README to INSTALL\n  diff: futureproof \"stop feeding the backend early\" logic\n  diff_tree: disable QUICK optimization with diff filter\n  builtin/commit.c: set status_format _after_ option parsing\n  t7508: demonstrate status's failure to use --porcelain format with -z","Jakub Narebski"]],"ref":"refs/heads/master","size":13,"head":"36896ea55ebece776c82328d8613f07fe7576d60","push_id":34247467}