feat(web): add blob and raw pages with chroma highlighting

GET /<repo>/blob/<ref>/<path> shows a file: text under 1 MiB highlighted
with chroma (token classes only, no inline style; the theme is the static
56-chroma.css generated by scripts/chroma-css.go onto the --syn-* tokens),
numbered lines with #L12 anchors and #L12-L20 ranges (the mockup's hx-on
selection), Markdown rendered with its source under a fold, a notice with the
raw link for files over 1 MiB and for binary files, and png/jpeg/gif/webp as
<img src=raw>. SVG is never an image or inline: it is text or a binary state.
Bidi, format and control characters are replaced by visible <U+XXXX> markers
in the code view and in names. Files over 20000 lines show the first 20000.

GET /<repo>/raw/<ref>/<path> streams the blob: text/plain; charset=utf-8 for
text, an image type sniffed from the bytes for the four raster formats, else
application/octet-stream as an attachment; nosniff, a sandbox CSP
(default-src 'none'; sandbox), no-cache for refs and immutable for a full
commit id, ETag from the blob id.

Tests: golden pages for every kind of file, raw headers and bytes, refs with
a slash, tags and commit ids, 404s, a private repository, Trojan Source,
no inline script or style.

commit

652ddb1706570aa8b9612ff116c0a42578a1c6a2

author

brice · 11d ago · 2026-10-10 13:24 UTC

committer

brice · 11d ago · 2026-10-10 13:25 UTC

parent

20d1f28

signature

GPG VerifiedCD88F9E564E0102646FB6077A1A07C7C7C3E349D · arch-gpg Verified for the committer email