pushed by mistake, wasn't reviewed.

diff from Josiah Frentsos and clue from tb@, thanks! (I can't read.)

based on a diff by Josiah Frentsos, thanks!

diff from Josiah Frentsos, thanks!

diff from Josiah Frentsos, thanks!

diff from Josiah Frentsos, thanks!

To avoid calling functions from got_operations.c directly from a template (which would hide the error), change got_output_repo_diff into got_open_diff_for_output that returns a file with the diff in it, to be then rendered by the template. got_gotweb_flushfile needs to be exposed then. It also bundles a smaller change: the `label' argument of got_repo_match_object_id is optional and not used, so just pass NULL there.

Despite -portable existing to make the codebase compile on platforms other than OpenBSD, there's nothing wrong with making -portable still compile on that platform as well.

When not using pkg-config on those systems where it isn't installed, libpanelw should be checked within ncursesw as well -- such is the case on OpenBSD for example.

This is included portably.

ok op@

was added there mistakenly. it's not part of the "compiler", it's part of the "user library" and provides useful functions for the consumers.

URLs are embedded as part of the HTML and, while it seems legal from RFC3986 to leave that character unquoted, we need it quoted to avoid breaking the HTML output. ok tracey@

ok tracey@

spotted by + "looks good" tracey@

binary blobs are automatically redirected to the BLOBRAW page (which is the old BLOB.) ok jamske

ok jamsek

This should avoid involuntary use of bind(2) with arbitrary socket paths. ok op@

Now that anyone can connect to the socket, it is probably safer to expose information about currently connected clients only to root.

and drop unix_socket and unix_socket_path in server context. ok stsp@

Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op