TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-04-18 20:51:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

ipn/localapi: only require read access to list file targets

Browse Source 
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
This commit is contained in:
Brad Fitzpatrick 2021-04-13 08:35:16 -07:00
parent d17f96b586
commit 1f4cf1a4f4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ipn/localapi/localapi.go
View File

@ -300,8 +300,8 @@ func (h *Handler) serveFiles(w http.ResponseWriter, r *http.Request) {
} }
func (h *Handler) serveFileTargets(w http.ResponseWriter, r *http.Request) { func (h *Handler) serveFileTargets(w http.ResponseWriter, r *http.Request) {
if !h.PermitWrite { if !h.PermitRead {
http.Error(w, "file access denied", http.StatusForbidden) http.Error(w, "access denied", http.StatusForbidden)
return return
} }
if r.Method != "GET" { if r.Method != "GET" {