Roland 5506dc0a88 repos: harden README search against untrusted READMEs ... A README comes from an untrusted remote. * Escape the README headline: snippet() marks matches with control characters, the text is HTML-escaped, then the markers become <b>. Headlines are rendered as HTML (HeadlineText). * Never follow a symlinked README (O_NOFOLLOW, regular files only). * Convert markdown line by line with linear-time patterns. The old multiline patterns backtracked polynomially; a README of blank lines never finished, and runs of `<!--`, `![` or `<` were quadratic. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-06 16:56:09 -06:00
..
archive	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
docs	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
flasher	db: request-path library functions use the request's connection (#774)	2026-10-04 11:05:20 -06:00
inventory	Strip whitespace from inventory item string values on save	2026-07-30 17:34:46 -06:00
map	Map previews that never drew, and a Docker map with no world under it (#658)	2026-08-11 20:37:23 -06:00
repos	repos: harden README search against untrusted READMEs	2026-10-06 16:56:09 -06:00
videos	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
zim	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
__init__.py	Add a Repos module that mirrors git repositories (backend)	2026-10-06 16:56:09 -06:00