Andrew Lytvynov decd9893e4 ipn/ipnlocal: validate domain of PopBrowserURL on default control URL (#11394) ...

If the client uses the default Tailscale control URL, validate that all
PopBrowserURLs are under tailscale.com or *.tailscale.com. This reduces
the risk of a compromised control plane opening phishing pages for
example.

The client trusts control for many other things, but this is one easy
way to reduce that trust a bit.

Fixes #11393

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>

2024-03-13 18:31:07 -06:00

..

conffile

ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key

2023-10-17 07:12:49 -07:00

ipnauth

go.mod, all: move away from inet.af domain seized by Taliban

2024-02-13 19:21:09 -08:00

ipnlocal

ipn/ipnlocal: validate domain of PopBrowserURL on default control URL (#11394)

2024-03-13 18:31:07 -06:00

ipnserver

ipn/ipnserver: always allow Windows SYSTEM user to connect

2024-01-12 14:37:53 -08:00

ipnstate

wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine

2024-02-28 09:50:18 -08:00

localapi

ipn/{ipnlocal,localapi}: add debug verb to force spam IPN bus NetMap

2024-03-09 17:47:15 -08:00

policy

ipn,tailconfig: clean up unreleased and removed app connector service

2023-11-09 22:36:52 -08:00

store

cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating

2023-08-29 13:24:05 -07:00

backend.go

ipn,tailfs: tie TailFS share configuration to user profile

2024-03-08 14:48:26 -06:00

conf.go

ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (#10507)

2023-12-08 10:19:25 -08:00

doc.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

fake_test.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ipn_clone.go

ipn,tailfs: tie TailFS share configuration to user profile

2024-03-08 14:48:26 -06:00

ipn_test.go

net/packet: split off checksum munging into different pkg

2023-10-11 14:25:58 -07:00

ipn_view.go

ipn,tailfs: tie TailFS share configuration to user profile

2024-03-08 14:48:26 -06:00

prefs_test.go

ipn,tailfs: tie TailFS share configuration to user profile

2024-03-08 14:48:26 -06:00

prefs.go

ipn,tailfs: tie TailFS share configuration to user profile

2024-03-08 14:48:26 -06:00

serve_test.go

{ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn

2024-03-05 14:30:38 -05:00

serve.go

{ipn,cmd/tailscale/cli}: move ServeConfig mutation logic to ipn/serve

2024-03-06 13:26:03 -05:00

store_test.go

ipn: avoid useless no-op WriteState calls

2023-08-07 08:44:24 -07:00

store.go

ipn: add comment about thread-safety to StateStore

2024-03-06 12:42:18 -06:00