internal/httpd/routes.go
352 lines · 19964 bytes
1package httpd
2
3import (
4 "fmt"
5 "io/fs"
6 "net"
7 "net/http"
8 "strings"
9
10 "gitbay.org/gitbay/internal/web"
11)
12
13// Route is one entry in the explicit route table. The view-only guarantee is
14// structural: Handler() consults web.mode when building the table, and the
15// route test asserts no mutating route exists in view_only mode.
16type Route struct {
17 Method string
18 Pattern string // without method prefix
19 // Mutating marks routes that can change server state. The git transport
20 // POSTs are not mutating: upload-pack is a pure read, and the
21 // receive-pack endpoint is a static refusal that writes nothing.
22 Mutating bool
23 Handler http.HandlerFunc
24}
25
26// Routes returns the route table for the configured web.mode.
27func (s *Server) Routes() []Route {
28 // Git smart transport (anonymous, public repos only).
29 routes := []Route{
30 {Method: "GET", Pattern: "/{owner}/{repo}/info/refs", Handler: s.infoRefs},
31 {Method: "POST", Pattern: "/{owner}/{repo}/git-upload-pack", Handler: s.uploadPack},
32 {Method: "POST", Pattern: "/{owner}/{repo}/git-receive-pack", Handler: s.receivePackRefusal},
33 // Git LFS: token-authenticated transport (minted over SSH), not
34 // web-session routes — anonymous download for public repos only.
35 {Method: "POST", Pattern: "/{owner}/{repo}/info/lfs/objects/batch", Handler: s.lfsBatch},
36 {Method: "GET", Pattern: "/{owner}/{repo}/info/lfs/objects/{oid}", Handler: s.lfsDownload},
37 {Method: "PUT", Pattern: "/{owner}/{repo}/info/lfs/objects/{oid}", Handler: s.lfsUpload},
38 }
39
40 // Web UI, read-only. These exist in every mode.
41 routes = append(routes,
42 Route{Method: "GET", Pattern: "/{$}", Handler: s.index},
43 Route{Method: "GET", Pattern: "/explore", Handler: s.explore},
44 Route{Method: "GET", Pattern: "/search", Handler: s.globalSearch},
45 Route{Method: "GET", Pattern: "/healthz", Handler: s.healthz},
46 Route{Method: "GET", Pattern: "/privacy", Handler: s.privacy},
47 Route{Method: "GET", Pattern: "/static/style.css", Handler: s.stylesheet},
48 )
49 // One literal route per embedded font file: a {name} wildcard is
50 // ambiguous against /{owner}/{repo}/... patterns in ServeMux precedence,
51 // and hand-typed names drifted from the files once (#102).
52 fonts, _ := fs.ReadDir(web.FontFS, "static/fonts")
53 for _, f := range fonts {
54 routes = append(routes, Route{Method: "GET", Pattern: "/static/fonts/" + f.Name(), Handler: s.font})
55 }
56 images, _ := fs.ReadDir(web.ImageFS, "static/img")
57 for _, f := range images {
58 routes = append(routes, Route{Method: "GET", Pattern: "/static/img/" + f.Name(), Handler: s.image})
59 }
60 if len(s.cfg.Web.AppleAppIDs) > 0 {
61 routes = append(routes, Route{Method: "GET", Pattern: "/.well-known/apple-app-site-association", Handler: s.appleAppSiteAssociation})
62 }
63 routes = append(routes,
64 Route{Method: "GET", Pattern: "/favicon.svg", Handler: s.favicon},
65 Route{Method: "GET", Pattern: "/{owner}", Handler: s.ownerProfile},
66 Route{Method: "GET", Pattern: "/{owner}/{repo}", Handler: s.repoHome},
67 Route{Method: "GET", Pattern: "/{owner}/{repo}/tree/{ref}/{path...}", Handler: s.tree},
68 Route{Method: "GET", Pattern: "/{owner}/{repo}/blob/{ref}/{path...}", Handler: s.blob},
69 Route{Method: "GET", Pattern: "/{owner}/{repo}/blame/{ref}/{path...}", Handler: s.blame},
70 Route{Method: "GET", Pattern: "/{owner}/{repo}/search", Handler: s.search},
71 Route{Method: "GET", Pattern: "/{owner}/{repo}/symbols", Handler: s.symbolsPage},
72 Route{Method: "GET", Pattern: "/{owner}/{repo}/milestones", Handler: s.milestones},
73 Route{Method: "GET", Pattern: "/{owner}/{repo}/labels", Handler: s.labels},
74 Route{Method: "GET", Pattern: "/{owner}/{repo}/wiki", Handler: s.wiki},
75 Route{Method: "GET", Pattern: "/{owner}/{repo}/wiki/_raw/{path...}", Handler: s.wikiRaw},
76 Route{Method: "GET", Pattern: "/{owner}/{repo}/wiki/{page...}", Handler: s.wiki},
77 Route{Method: "GET", Pattern: "/{owner}/{repo}/releases", Handler: s.releases},
78 Route{Method: "GET", Pattern: "/{owner}/{repo}/releases.atom", Handler: s.releasesAtom},
79 Route{Method: "GET", Pattern: "/{owner}/{repo}/log.atom", Handler: s.logAtom},
80 Route{Method: "GET", Pattern: "/{owner}/{repo}/log.atom/{ref...}", Handler: s.logAtom},
81 Route{Method: "GET", Pattern: "/{owner}/activity.atom", Handler: s.ownerAtom},
82 Route{Method: "GET", Pattern: "/{owner}/-/repositories", Handler: s.ownerProfile},
83 Route{Method: "GET", Pattern: "/{owner}/-/bookmarks", Handler: s.ownerProfile},
84 Route{Method: "GET", Pattern: "/{owner}/-/people", Handler: s.ownerProfile},
85 Route{Method: "GET", Pattern: "/{owner}/-/labels", Handler: s.orgLabels},
86 Route{Method: "GET", Pattern: "/{owner}/-/milestones", Handler: s.orgMilestones},
87 Route{Method: "GET", Pattern: "/{owner}/-/snippets", Handler: s.ownerProfile},
88 Route{Method: "GET", Pattern: "/{owner}/-/snippets/{id}", Handler: s.snippetPage},
89 Route{Method: "GET", Pattern: "/{owner}/-/snippets/{id}/raw/{name}", Handler: s.snippetRaw},
90 Route{Method: "GET", Pattern: "/{owner}/{repo}/builds", Handler: s.builds},
91 Route{Method: "GET", Pattern: "/{owner}/{repo}/badge/build.svg", Handler: s.buildBadge},
92 Route{Method: "GET", Pattern: "/{owner}/{repo}/badge/build.png", Handler: s.buildBadgePNG},
93 Route{Method: "GET", Pattern: "/{owner}/{repo}/builds/{n}", Handler: s.build},
94 Route{Method: "GET", Pattern: "/{owner}/{repo}/releases/download/{tag}/{name}", Handler: s.releaseAsset},
95 Route{Method: "GET", Pattern: "/{owner}/{repo}/raw/{ref}/{path...}", Handler: s.raw},
96 Route{Method: "GET", Pattern: "/{owner}/{repo}/log", Handler: s.log},
97 Route{Method: "GET", Pattern: "/{owner}/{repo}/log/{ref}", Handler: s.log},
98 Route{Method: "GET", Pattern: "/{owner}/{repo}/commit/{sha}", Handler: s.commit},
99 Route{Method: "GET", Pattern: "/{owner}/{repo}/compare", Handler: s.compare},
100 Route{Method: "GET", Pattern: "/{owner}/{repo}/compare/{range}", Handler: s.compare},
101 Route{Method: "GET", Pattern: "/{owner}/{repo}/refs", Handler: s.refs},
102 Route{Method: "GET", Pattern: "/{owner}/{repo}/archive/{file}", Handler: s.archive},
103 Route{Method: "GET", Pattern: "/{owner}/{repo}/issues", Handler: s.issues},
104 Route{Method: "GET", Pattern: "/{owner}/{repo}/issues/{n}", Handler: s.issue},
105 Route{Method: "GET", Pattern: "/{owner}/{repo}/mrs", Handler: s.mrs},
106 Route{Method: "GET", Pattern: "/{owner}/{repo}/mrs/{n}", Handler: s.mr},
107 Route{Method: "GET", Pattern: "/{owner}/{repo}/mrs/{n}/range-diff", Handler: s.mrRangeDiff},
108 )
109
110 // The JSON API is its own opt-in surface, independent of web.mode.
111 if s.cfg.API.Enabled {
112 routes = append(routes,
113 Route{Method: "POST", Pattern: "/api/v1/cmd", Mutating: true, Handler: s.apiCmd},
114 Route{Method: "GET", Pattern: "/api/v1/read", Handler: s.apiRead},
115 )
116 }
117
118 // Account-mode routes exist only when web.mode = "accounts". In
119 // view_only they are never registered — the structural guarantee.
120 if s.cfg.Web.Mode == "accounts" {
121 routes = append(routes,
122 Route{Method: "GET", Pattern: "/login", Handler: s.login, Mutating: true}, // consumes a one-time token
123 Route{Method: "POST", Pattern: "/login", Mutating: true,
124 Handler: s.checkOrigin(s.loginSubmit)},
125 Route{Method: "GET", Pattern: "/logout", Handler: s.requireUser(s.logoutForm)},
126 Route{Method: "POST", Pattern: "/logout", Mutating: true,
127 Handler: s.checkOrigin(s.logout)},
128 Route{Method: "GET", Pattern: "/new", Handler: s.requireUser(s.newRepoForm)},
129 Route{Method: "GET", Pattern: "/settings", Handler: s.requireUser(s.accountForm)},
130 Route{Method: "GET", Pattern: "/settings/export", Handler: s.requireUser(s.accountExport)},
131 Route{Method: "GET", Pattern: "/settings/delete", Handler: s.accountDeleteForm},
132 Route{Method: "POST", Pattern: "/settings/delete", Mutating: true,
133 Handler: s.checkOrigin(s.accountDeleteConfirm)},
134 Route{Method: "GET", Pattern: "/notifications", Handler: s.requireUser(s.notifications)},
135 Route{Method: "POST", Pattern: "/notifications", Mutating: true,
136 Handler: s.checkOrigin(s.requireUser(s.notificationsRead))},
137 Route{Method: "GET", Pattern: "/admin", Handler: s.requireUser(s.adminPage)},
138 Route{Method: "GET", Pattern: "/admin/users", Handler: s.requireUser(s.adminUsers)},
139 Route{Method: "POST", Pattern: "/admin/users", Mutating: true,
140 Handler: s.checkOrigin(s.requireUser(s.adminUsersSubmit))},
141 Route{Method: "POST", Pattern: "/{owner}", Mutating: true,
142 Handler: s.checkOrigin(s.requireUser(s.orgSubmit))},
143 Route{Method: "POST", Pattern: "/settings", Mutating: true,
144 Handler: s.checkOrigin(s.requireUser(s.accountSubmit))},
145 )
146 // Web signup fronts the same registration path as SSH register,
147 // so it exists only when registration is open or invite.
148 if s.cfg.Registration.Mode != "closed" {
149 routes = append(routes,
150 Route{Method: "GET", Pattern: "/register", Handler: s.signupForm},
151 Route{Method: "POST", Pattern: "/register", Mutating: true,
152 Handler: s.checkOrigin(s.signupSubmit)},
153 )
154 }
155 routes = append(routes,
156 Route{Method: "POST", Pattern: "/new", Mutating: true,
157 Handler: s.checkOrigin(s.requireUser(s.newSubmit))},
158 Route{Method: "POST", Pattern: "/{owner}/{repo}/pin", Mutating: true,
159 Handler: s.checkOrigin(s.requireUser(s.pinToggle))},
160 Route{Method: "POST", Pattern: "/{owner}/{repo}/watch", Mutating: true,
161 Handler: s.checkOrigin(s.requireUser(s.watchToggle))},
162 Route{Method: "GET", Pattern: "/{owner}/{repo}/issues/new",
163 Handler: s.requireUser(s.issueCreateForm)},
164 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/new", Mutating: true,
165 Handler: s.checkOrigin(s.requireUser(s.issueCreateSubmit))},
166 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/comment", Mutating: true,
167 Handler: s.checkOrigin(s.requireUser(s.issueCommentSubmit))},
168 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/edit", Mutating: true,
169 Handler: s.checkOrigin(s.requireUser(s.issueEditSubmit))},
170 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/react", Mutating: true,
171 Handler: s.checkOrigin(s.requireUser(s.issueReactSubmit))},
172 // Triage: each runs the matching issue command.
173 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/state", Mutating: true,
174 Handler: s.checkOrigin(s.requireUser(s.issueStateSubmit))},
175 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/label", Mutating: true,
176 Handler: s.checkOrigin(s.requireUser(s.issueLabelSubmit))},
177 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/assign", Mutating: true,
178 Handler: s.checkOrigin(s.requireUser(s.issueAssignSubmit))},
179 Route{Method: "POST", Pattern: "/{owner}/{repo}/issues/{n}/milestone", Mutating: true,
180 Handler: s.checkOrigin(s.requireUser(s.issueMilestoneSubmit))},
181 Route{Method: "POST", Pattern: "/{owner}/{repo}/releases", Mutating: true,
182 Handler: s.checkOrigin(s.requireUser(s.releaseSubmit))},
183 Route{Method: "POST", Pattern: "/{owner}/{repo}/labels", Mutating: true,
184 Handler: s.checkOrigin(s.requireUser(s.labelSubmit))},
185 Route{Method: "POST", Pattern: "/{owner}/{repo}/releases/assets", Mutating: true,
186 Handler: s.checkOrigin(s.requireUser(s.releaseAssetSubmit))},
187 Route{Method: "POST", Pattern: "/{owner}/{repo}/milestones", Mutating: true,
188 Handler: s.checkOrigin(s.requireUser(s.milestoneSubmit))},
189 Route{Method: "POST", Pattern: "/{owner}/-/labels", Mutating: true,
190 Handler: s.checkOrigin(s.requireUser(s.orgLabelSubmit))},
191 Route{Method: "POST", Pattern: "/{owner}/-/milestones", Mutating: true,
192 Handler: s.checkOrigin(s.requireUser(s.orgMilestoneSubmit))},
193 Route{Method: "GET", Pattern: "/bookmarks", Handler: s.requireUser(s.bookmarksPage)},
194 Route{Method: "GET", Pattern: "/{owner}/-/queries", Handler: s.requireUser(s.queriesPage)},
195 Route{Method: "GET", Pattern: "/{owner}/-/queries/{name}", Handler: s.requireUser(s.queriesPage)},
196 Route{Method: "GET", Pattern: "/{owner}/-/snippets/new", Handler: s.requireUser(s.snippetNewForm)},
197 Route{Method: "POST", Pattern: "/{owner}/-/snippets/new", Mutating: true,
198 Handler: s.checkOrigin(s.requireUser(s.snippetNewSubmit))},
199 Route{Method: "POST", Pattern: "/{owner}/-/snippets/{id}/edit", Mutating: true,
200 Handler: s.checkOrigin(s.requireUser(s.snippetEditSubmit))},
201 Route{Method: "POST", Pattern: "/{owner}/-/snippets/{id}/delete", Mutating: true,
202 Handler: s.checkOrigin(s.requireUser(s.snippetDeleteSubmit))},
203 Route{Method: "POST", Pattern: "/{owner}/-/snippets/{id}/file", Mutating: true,
204 Handler: s.checkOrigin(s.requireUser(s.snippetFileSubmit))},
205 Route{Method: "POST", Pattern: "/{owner}/-/snippets/{id}/file/remove", Mutating: true,
206 Handler: s.checkOrigin(s.requireUser(s.snippetFileRemoveSubmit))},
207 Route{Method: "POST", Pattern: "/{owner}/{repo}/bookmark", Mutating: true,
208 Handler: s.checkOrigin(s.requireUser(s.bookmarkToggle))},
209 Route{Method: "GET", Pattern: "/{owner}/{repo}/fork", Handler: s.requireUser(s.forkForm)},
210 Route{Method: "POST", Pattern: "/{owner}/{repo}/fork", Mutating: true,
211 Handler: s.checkOrigin(s.requireUser(s.forkSubmit))},
212 Route{Method: "POST", Pattern: "/{owner}/{repo}/builds", Mutating: true,
213 Handler: s.checkOrigin(s.requireUser(s.buildTriggerSubmit))},
214 Route{Method: "POST", Pattern: "/{owner}/{repo}/builds/{n}/cancel", Mutating: true,
215 Handler: s.checkOrigin(s.requireUser(s.buildCancelSubmit))},
216 Route{Method: "GET", Pattern: "/{owner}/{repo}/settings",
217 Handler: s.requireUser(s.settingsForm)},
218 Route{Method: "POST", Pattern: "/{owner}/{repo}/settings", Mutating: true,
219 Handler: s.checkOrigin(s.requireUser(s.settingsSubmit))},
220 Route{Method: "GET", Pattern: "/{owner}/{repo}/mrs/new",
221 Handler: s.requireUser(s.mrCreateForm)},
222 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/new", Mutating: true,
223 Handler: s.checkOrigin(s.requireUser(s.mrCreateSubmit))},
224 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/edit", Mutating: true,
225 Handler: s.checkOrigin(s.requireUser(s.mrEditSubmit))},
226 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/comment", Mutating: true,
227 Handler: s.checkOrigin(s.requireUser(s.mrCommentSubmit))},
228 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/react", Mutating: true,
229 Handler: s.checkOrigin(s.requireUser(s.mrReactSubmit))},
230 // Review loop: each runs the matching mr command.
231 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/review", Mutating: true,
232 Handler: s.checkOrigin(s.requireUser(s.mrReviewSubmit))},
233 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/review-request", Mutating: true,
234 Handler: s.checkOrigin(s.requireUser(s.mrReviewRequestSubmit))},
235 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/label", Mutating: true,
236 Handler: s.checkOrigin(s.requireUser(s.mrLabelSubmit))},
237 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/merge", Mutating: true,
238 Handler: s.checkOrigin(s.requireUser(s.mrMergeSubmit))},
239 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/close", Mutating: true,
240 Handler: s.checkOrigin(s.requireUser(s.mrCloseSubmit))},
241 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/draft", Mutating: true,
242 Handler: s.checkOrigin(s.requireUser(s.mrDraftSubmit))},
243 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/retarget", Mutating: true,
244 Handler: s.checkOrigin(s.requireUser(s.mrRetargetSubmit))},
245 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/thread", Mutating: true,
246 Handler: s.checkOrigin(s.requireUser(s.mrThreadSubmit))},
247 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/diff-comment", Mutating: true,
248 Handler: s.checkOrigin(s.requireUser(s.mrDiffCommentSubmit))},
249 Route{Method: "POST", Pattern: "/{owner}/{repo}/mrs/{n}/suggestion", Mutating: true,
250 Handler: s.checkOrigin(s.requireUser(s.mrSuggestionSubmit))},
251 Route{Method: "GET", Pattern: "/{owner}/{repo}/edit/{ref}/{path...}",
252 Handler: s.requireUser(s.editForm)},
253 Route{Method: "POST", Pattern: "/{owner}/{repo}/edit/{ref}/{path...}", Mutating: true,
254 Handler: s.checkOrigin(s.requireUser(s.editSubmit))},
255 )
256 }
257 return routes
258}
259
260func (s *Server) Handler() http.Handler {
261 mux := http.NewServeMux()
262 for _, r := range s.Routes() {
263 mux.HandleFunc(r.Method+" "+r.Pattern, r.Handler)
264 }
265 // A path no pattern matches gets the 404 page, not net/http's
266 // plain-text body (#232), unless dropping a trailing slash makes it
267 // match (#233).
268 mux.HandleFunc("/", s.unmatched(mux))
269 var h http.Handler = mux
270 if len(s.cfg.GoImport) > 0 {
271 h = s.goImportHandler(mux)
272 }
273 // Always wrapped: custom pages domains work with or without the
274 // built-in [pages] domain.
275 return compressed(s.pagesRouter(s.securityHeaders(h)))
276}
277
278// unmatched answers a path no pattern matched. A GET whose path ends in
279// a slash and resolves without it redirects there, so /cmc/ reaches /cmc
280// and /cmc/-/snippets/ reaches /cmc/-/snippets (#233). Everything else is
281// the 404 page. Patterns ending in a {path...} wildcard already accept
282// the slash and never arrive here.
283func (s *Server) unmatched(mux *http.ServeMux) http.HandlerFunc {
284 return func(w http.ResponseWriter, r *http.Request) {
285 p := r.URL.Path
286 if len(p) > 1 && strings.HasSuffix(p, "/") && (r.Method == "GET" || r.Method == "HEAD") {
287 trimmed := r.Clone(r.Context())
288 u := *r.URL
289 u.Path = strings.TrimRight(p, "/")
290 trimmed.URL = &u
291 // The fallback itself is registered at "/", so a miss
292 // reports that pattern; a real route reports its own.
293 if _, pattern := mux.Handler(trimmed); pattern != "" && pattern != "/" {
294 // net/http fills Scheme and Host from an
295 // absolute-form request line, which RFC 7230
296 // requires a server to accept; carrying them
297 // into Location sends the reader off-site.
298 u.Scheme, u.Host, u.User = "", "", nil
299 http.Redirect(w, r, u.String(), http.StatusMovedPermanently)
300 return
301 }
302 }
303 s.notFound(w, r)
304 }
305}
306
307// securityHeaders sets defensive response headers on every reply. The CSP
308// is strict where it can be: no scripts at all (the UI needs none), no
309// plugins, no embedding. Inline styles are allowed because label chips
310// carry their color inline (chroma is class-based so the syntax palette
311// can follow the color scheme). Images may load from anywhere so external README images
312// still render; they are the one thing a reader-facing forge can't police
313// without a proxy.
314func (s *Server) securityHeaders(next http.Handler) http.Handler {
315 const csp = "default-src 'self'; script-src 'none'; style-src 'self' 'unsafe-inline'; " +
316 "img-src * data:; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'"
317 return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
318 hd := w.Header()
319 hd.Set("Content-Security-Policy", csp)
320 hd.Set("X-Frame-Options", "DENY")
321 hd.Set("X-Content-Type-Options", "nosniff")
322 hd.Set("Referrer-Policy", "no-referrer")
323 hd.Set("Cross-Origin-Opener-Policy", "same-origin")
324 if s.cfg.HTTP.TLS != "off" {
325 hd.Set("Strict-Transport-Security", "max-age=31536000; includeSubDomains")
326 }
327 next.ServeHTTP(w, r)
328 })
329}
330
331func (s *Server) goImportHandler(mux http.Handler) http.Handler {
332 // Vanity Go modules: ?go-get=1 requests under a configured module
333 // path answer with the go-import meta tag before normal routing.
334 return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
335 if r.URL.Query().Get("go-get") == "1" {
336 host := r.Host
337 if h, _, err := net.SplitHostPort(host); err == nil {
338 host = h
339 }
340 requested := host + strings.TrimSuffix(r.URL.Path, "/")
341 for module, repo := range s.cfg.GoImport {
342 if requested == module || strings.HasPrefix(requested, module+"/") {
343 w.Header().Set("Content-Type", "text/html; charset=utf-8")
344 fmt.Fprintf(w, `<!DOCTYPE html><html><head><meta name="go-import" content="%s git %s/%s.git"></head><body>%s</body></html>`,
345 module, s.cfg.Server.SiteURL, repo, module)
346 return
347 }
348 }
349 }
350 mux.ServeHTTP(w, r)
351 })
352}