This should avoid involuntary use of bind(2) with arbitrary socket paths. ok op@

Now that anyone can connect to the socket, it is probably safer to expose information about currently connected clients only to root.

and drop unix_socket and unix_socket_path in server context. ok stsp@

Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op

can now use got_object_blob_is_binary to simplify the logic. ok stsp@

needed for future use by gotwebd. ok stsp@

In some pages gotwebd shows horizontal scrollbars because the error message overflows the width. Remove the explicit width in the CSS, the message is still rendered fine and doesn't overflow the page. spotted by and ok tracey@

no need to duplicate what strtonum does; pass the *real* maximum value allowed to it directly. ok stsp@

it's a string, `const char *' is fine (and what all the callers use anyway.)

Since gotwebd serves the RSS from a path without a file name component, browsers just make up a random string to give the file a name which can be confusing. Furthermore, since it's served as application/rss+xml they try to render the XML (failing.) Use gotweb_render_content_type_file (which sets the Content-Disposition HTTP header) to fix both: the feed is now called <repo-name>.rss and set as attachment (thus saved and not rendered.) Change the function to take an optional filename suffix for the occasion. ok jamsek

This allows to use a suffix to indicate the unit of measure, such as "1h" for one hour or "30m" for 30 minutes. The suffix "s" for seconds is also accepted for completeness. ok stsp

spotted by + ok op@

`type' and `file' are strings so use `const char *' for both.

different yacc implementations (e.g. GNU bison) may put the various parts in a different order, and so the definition of the function may not be visible in the generated code.

Allow administrators to tweak the default authentication and request timeouts if needed, and to tweak the limit of concurrent connections for specific user accounts. with several tweaks from and ok op@

People coming from CVS might not expect names of patch contributers to show up in commit history listings, so make things easy for them. discussed with op@

Because gotd expects some parameters to be present they must not be optional at the syntax level.

gotwebd defaults to listening on a unix socket, and this man page aims to provide an appropriate configuration snippet in EXAMPLES. suggested by Paul Wrankin via gameoftrees IRC

otherwise if binaryfilename fails to match the line, `name' may be left pointing to free'd memory.