Commit Briefs


Stefan Sperling

make it harder to leak notification credentials over plaintext HTTP

ok op@





Stefan Sperling

remove dead code under DEBUG_HTTP; ok op@


Stefan Sperling

use unveil to restrict filesystem access of got-fetch-http

With HTTPS we only need to be able to read /etc/ssl/cert.pem. With plaintext HTTP no filesystem access is needed at all.




Stefan Sperling

fix test dir name




Stefan Sperling

drop git+ssh protocol name from documentation; Git has done the same

We can keep accepting git+ssh for backwards compatibility with existing configs.


Stefan Sperling

doc tweaks regarding HTTP protocol support





Omar Polo

fmt



Omar Polo

http-server: error on unknown method

just for robustness; neither git nor got-fetch-http are expected to use other methods except for GET and POST.


Omar Polo

add http-server; will be used to test got-fetch-http

based on a draft by stsp; git(1) manages to clone from it.




Stefan Sperling

make got-fetch-http get_refs() understand when packet lines end

Previously it would only exit the loop when reading failed. ok tobhe@