gitweb: export options

$export_ok: If this variable evaluates to true it is checked
if a file with this name exists in the repository.  If it
does not exist the repository cannot be viewed from gitweb.
(Similar to git-daemon-export-ok for git-daemon).

$strict_export: If this variable evaluates to true only
repositories listed on the project-list-page of gitweb can
be accessed.

Signed-off-by: Junio C Hamano <redacted>

diff --git a/gitweb.perl b/gitweb.perl
index b5a6bcb09fa1161c3e061ec48c5be04859fc7289b71fd11bdcb45f6e1a3b8f73..a147659a6045704203e4c34f4e368977b6b1cac6da4b818f26ee93fe7793f2d0 100755 (executable)
--- a/gitweb.perl
+++ b/gitweb.perl
@@ -54,6 +54,13 @@ our $favicon = "++GITWEB_FAVICON++";
 # source of projects list
 our $projects_list = "++GITWEB_LIST++";
 
 # source of projects list
 our $projects_list = "++GITWEB_LIST++";
 

+# show repository only if this file exists
+# (only effective if this variable evaluates to true)
+our $export_ok = "++GITWEB_EXPORT_OK++";
+
+# only allow viewing of repositories also shown on the overview page
+our $strict_export = "++GITWEB_STRICT_EXPORT++";
+

 # list of git base URLs used for URL to where fetch project from,
 # i.e. full URL is "$git_base_url/$project"
 our @git_base_url_list = ("++GITWEB_BASE_URL++");
 # list of git base URLs used for URL to where fetch project from,
 # i.e. full URL is "$git_base_url/$project"
 our @git_base_url_list = ("++GITWEB_BASE_URL++");


@@ -200,7 +207,9 @@ our $project = $cgi->param('p');
 if (defined $project) {
        if (!validate_input($project) ||
            !(-d "$projectroot/$project") ||
 if (defined $project) {
        if (!validate_input($project) ||
            !(-d "$projectroot/$project") ||

-           !(-e "$projectroot/$project/HEAD")) {
+           !(-e "$projectroot/$project/HEAD") ||
+           ($export_ok && !(-e "$projectroot/$project/$export_ok")) ||
+           ($strict_export && !project_in_list($project))) {

                undef $project;
                die_error(undef, "No such project");
        }
                undef $project;
                die_error(undef, "No such project");
        }


@@ -422,6 +431,12 @@ sub untabify {
        return $line;
 }
 
        return $line;
 }
 

+sub project_in_list {
+       my $project = shift;
+       my @list = git_get_projects_list();
+       return @list && scalar(grep { $_->{'path'} eq $project } @list);
+}
+

 ## ----------------------------------------------------------------------
 ## HTML aware string manipulation
 
 ## ----------------------------------------------------------------------
 ## HTML aware string manipulation
 


@@ -734,7 +749,8 @@ sub git_get_projects_list {
 
                                my $subdir = substr($File::Find::name, $pfxlen + 1);
                                # we check related file in $projectroot
 
                                my $subdir = substr($File::Find::name, $pfxlen + 1);
                                # we check related file in $projectroot

-                               if (-e "$projectroot/$subdir/HEAD") {
+                               if (-e "$projectroot/$subdir/HEAD" && (!$export_ok ||
+                                   -e "$projectroot/$subdir/$export_ok")) {

                                        push @list, { path => $subdir };
                                        $File::Find::prune = 1;
                                }
                                        push @list, { path => $subdir };
                                        $File::Find::prune = 1;
                                }


@@ -755,7 +771,8 @@ sub git_get_projects_list {
                        if (!defined $path) {
                                next;
                        }
                        if (!defined $path) {
                                next;
                        }

-                       if (-e "$projectroot/$path/HEAD") {
+                       if (-e "$projectroot/$path/HEAD" && (!$export_ok ||
+                           -e "$projectroot/$path/$export_ok")) {

                                my $pr = {
                                        path => $path,
                                        owner => decode("utf8", $owner, Encode::FB_DEFAULT),
                                my $pr = {
                                        path => $path,
                                        owner => decode("utf8", $owner, Encode::FB_DEFAULT),