the relevant parts onto CVSweb 3.0.6 stock files, so it is not entirely
impossible that some local changes were lost, though I don't think/hope
so.
The use of cgi-style.pl was merged by danger@. He also, together with
Dan Langille, got CVSweb 3 tested against FreshPorts prior to commit, so
this update should not blow up FreshPorts. Thanks to both for the help.
Note that this now means that the FreeBSD CGI scripts more or less
require perl 5.8 (or at least something newer than 5.0), to run without
local modifications - but people really shouldn't be running perl 5.0
these days anyway... (no comments on the fact that www.FreeBSD.org did
this until ~2 hours ago... ).
2002-05-22 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Read configuration files with `do' instead of
`require' to unbreak mod_perl support.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Cosmetic fixes. Use and/or rather than &&/|| to
connect sentences.
* cvsweb.cgi: Exit with -1 if exec() fails.
* cvsweb.cgi: Do not print a redundant `Diff' for rev.1.1.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Prevent cross-site scripting.
[Submitted by: Motoyuki Konno <motoyuki@bsdclub.org> (modified)]
* cvsweb.cgi: Skip a possible `locked by' clause and extract a
revision number out of a log entry properly.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Apply some HTML cleanups and use CSS instead of
ancient HTML 3/4 tags and attributes.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Pass `use' features to import to make it more memory
efficient.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Add new configuration variables: $allow_log_extra,
$allow_dir_extra, and $allow_source_extra.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.2.
* cvsweb.cgi: Previous fixes against cross-site scripting
vulnerabilities were insufficient and buggy (error messages were
messed up). Revamp fatal() to HTML-quote automatically and fix
error message output.
* cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.3.
2002-05-11 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: There are no spaces at EOL in modern rlog output.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
2002-05-08 Motoyuki Konno <motoyuki@FreeBSD.org>
* cvsweb.cgi: Fix a cross-site scripting vulnerablity.
2002-05-07 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.conf-netbsd, cvsweb.conf-openbsd: NetBSD and OpenBSD
don't use $CVSHeader$ but $Id$.
[Submitted by: motoyuki@FreeBSD.org]
* cvsweb.cgi: Work around a bug of cvs -p; expand symlinks in a
cvsroot.
[Submitted by: motoyuki@FreeBSD.org]
* cvsweb.cgi: Fix parsing in 'tags' state.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.conf-freebsd: Allow downloading a tarball of a project
directory as well as a port directory.
* cvsweb.cgi, cvsweb.conf: Introduce optional output filter.
[Requested by: Shigeyuki Fukushima <shige@FreeBSD.org>]
* cvsweb.cgi: Fix a bug where it produces wrong download links when
cvsweb.cgi is placed right under the document root.
[Reported by: Arnaud on EFnet]
2001-08-01 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: perltidy -i=8 -t -pt=2 -bt=2 -sbt=2 -ci=4 -noll -sfs
-nasc -ce
* cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd, cvsweb.conf-ruby: perltidy -i=8 -t -pt=2 -bt=2
-sbt=2 -ci=4 -noll -sfs -nasc -ce
* cvsweb.cgi, cvsweb.conf: MFZ 1.111, but introduce @ForbiddenFiles
instead of @DissallowRead to forbid user to cvs
checkout/diff/annotate specified files.
* cvsweb.cgi: MFZ 1.112: A couple of trivial fixes.
2001-07-26 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Chdir to TMPDIR so it works even when the cgi-bin
directory is unreadable.
[Submitted by: Dmitry Morozovsky <marck@rinet.ru>]
* cvsweb.cgi: Let the module/path box appear and work properly
when there is only one repository.
[Submitted by: Dmitry Morozovsky <marck@rinet.ru>]
2001-01-12 08:42 knu
* cvsweb.cgi, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd: Clean up URI parser.
Workaround thttpd's buggy SCRIPT_NAME / PATH_INFO parser.
Requested by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org>
Allow downloading a single port/pkgsrc in tarball by default.
2001-01-12 03:17 knu
* cvsweb.cgi, cvsweb.conf: D'oh, forgot to chomp the result of
`uname`.
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
2001-01-11 11:00 knu
* cvsweb.cgi, cvsweb.conf: Oops.
2001-01-11 10:52 knu
* cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd: Run "tar cf - ... | gzip -c" rather than "tar
zcf - ..." to avoid tar(1)'s automatic padding of nulls to align
with the block size, which is just garbage for a receiver.
Noted by: Katsuyuki Komatsu <komatsu@sarion.co.jp>
Have $uname variable to hold the OS implementation name.
Move %CMD's initialization part to the beginning of cvsweb.conf so
it can use $uname and configure properly for the OS.
Wrap FreeBSD or OpenBSD specific features in conditional blocks
using $uname.
Fix some open() calls in good manners.
2001-01-05 09:00 knu
* cvsweb.cgi: Delete $ENV{PATH} before everything. (against -T
paranoia) It's nothing to worry since cvsweb.cgi always invokes
executables by full paths, though.
Correct the error messages regarding $command_path.
2001-01-03 17:57 knu
* cvsweb.cgi, cvsweb.conf: Don't rely on perl's $ENV{PATH} search.
Search commands for itself and specify them by full paths.
2001-01-02 08:15 knu
* cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd, cvsweb.conf-ruby: Add $prkeyword variable to
allow user to use (e.g.) `Bug' instead of `PR' as the bug report
identifier.
Add cvsweb.conf-{freebsd,openbsd,netbsd,ruby} files, and move
rather FreeBSD specific configuration values to
cvsweb.conf-freebsd.
Add a %funcline_regexp entry for Ruby. (*.rb)
2001-01-02 06:24 knu
* cvsweb.conf: Add `pending' to the list of PR categories.
2001-01-02 05:57 knu
* cvsweb.cgi: Reduce 'Use of uninitialized value' warnings.
Noticed by: Wolfram Schneider <wosch@schneider.org>
2000-12-30 08:56 knu
* cvsweb.cgi: Oops, I forgot "cvs export" always need a -r/-D.
Specify -rHEAD when no tag/branch is defaulted.
2000-12-30 08:35 knu
* cvsweb.cgi, cvsweb.conf: Add $preformat_in_markup variable and
turn it off by default. This option should be turned off when you
have files in the repository that are in a multibyte encoding which
uses HTML special characters ([<>&"]) as part of a multi-byte
character. (such as iso-2022-jp, ShiftJIS, etc.) Otherwise those
files will get screwed up in markup.
Fix for those systems which tar(1)'s are not GNU tar(1).
- Add @@tar_options variable and make the --ignore-failed-read flag
optional.
- Use cvs export instead of cvs checkout, so the --exclude 'CVS'
flag isn't needed.
Noticed by: Christian Weisgerber <naddy@mips.inka.de>
Fix for those systems which cvs(1)'s don't support -R option.
(Actually, only FreeBSD's and OpenBSD's cvs(1) support it)
- Add @@cvs_options and make the -R flag optional.
2000-12-29 22:29 knu
* cvsweb.cgi: Add charset to all text/* output, including diffs.
Submitted by: Alexey Zelkin <phantom@cris.net>
2000-12-29 18:12 knu
* cvsweb.cgi: The use of `do "file"' is obsolete. Use require
instead.
2000-12-29 17:47 knu
* cvsweb.cgi: Add the prototype declaration for hrefquote().
