Patrick O'Doherty a05924a9e5

client/web: add Sec-Fetch-Site CSRF protection (#16046) ...

RELNOTE=Fix CSRF errors in the client Web UI

Replace gorilla/csrf with a Sec-Fetch-Site based CSRF protection
middleware that falls back to comparing the Host & Origin headers if no
SFS value is passed by the client.

Add an -origin override to the web CLI that allows callers to specify
the origin at which the web UI will be available if it is hosted behind
a reverse proxy or within another application via CGI.

Updates #14872
Updates #15065

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>

2025-05-22 12:26:02 -07:00

..

childproc

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

tailscaledhooks

feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare

2025-05-08 10:08:27 -07:00

debug.go

net/netmon: publish events to event bus

2025-04-16 10:10:45 -07:00

depaware.txt

client/web: add Sec-Fetch-Site CSRF protection (#16046)

2025-05-22 12:26:02 -07:00

deps_test.go

ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh

2025-01-31 16:36:39 -06:00

generate.go

cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS

2023-03-01 15:45:12 -07:00

install_darwin.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

install_windows.go

feature/taildrop, ipn/ipnlocal: remove leftover dup calls to osshare

2025-05-08 10:08:27 -07:00

manifest_windows_386.syso

cmd/{tailscale,tailscaled}: embed manifest into Windows binaries

2022-11-21 18:15:51 -05:00

manifest_windows_amd64.syso

cmd/{tailscale,tailscaled}: embed manifest into Windows binaries

2022-11-21 18:15:51 -05:00

manifest_windows_arm64.syso

cmd/{tailscale,tailscaled}: embed manifest into Windows binaries

2022-11-21 18:15:51 -05:00

proxy.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

required_version.go

all: switch to and require Go 1.23

2024-08-22 12:31:08 -07:00

sigpipe.go

all: adjust some build tags for plan9

2023-08-24 15:42:35 -07:00

ssh.go

ssh/tailssh: add Plan 9 support for Tailscale SSH

2025-04-02 07:36:04 -07:00

tailscaled_bird.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

tailscaled_notwindows.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

tailscaled_test.go

control/controlclient,tempfork/httprec: don't link httptest, test certs for c2n

2025-01-26 21:30:28 +00:00

tailscaled_windows.go

net/netmon: publish events to event bus

2025-04-16 10:10:45 -07:00

tailscaled.defaults

cmd/tailscaled: rename relaynode reference in defaults file comment

2020-03-13 14:38:04 -07:00

tailscaled.go

feature/taildrop: move rest of Taildrop out of LocalBackend

2025-05-06 20:41:27 -07:00

tailscaled.openrc

tstest/integration/vms: use an in-process logcatcher (#2360)

2021-07-08 14:39:45 -04:00

tailscaled.service

cmd/tailscaled: move cleanup to an implicit action during startup

2024-04-09 12:44:08 -07:00

windows-manifest.xml

cmd/{tailscale,tailscaled}: embed manifest into Windows binaries

2022-11-21 18:15:51 -05:00

with_cli.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00