Will Norris 6b956b49e0 client/web: add some security checks for full client ... Require that requests to servers in manage mode are made to the Tailscale IP (either ipv4 or ipv6) or quad-100. Also set various security headers on those responses. These might be too restrictive, but we can relax them as needed. Allow requests to /ok (even in manage mode) with no checks. This will be used for the connectivity check from a login client to see if the management client is reachable. Updates tailscale/corp#14335 Signed-off-by: Will Norris <will@tailscale.com>		2023-11-03 14:15:59 -07:00
..
conffile	ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key	2023-10-17 07:12:49 -07:00
ipnauth	ipn/ipnauth: improve the Windows token administrator check	2023-11-03 14:37:04 -06:00
ipnlocal	client/web: add some security checks for full client	2023-11-03 14:15:59 -07:00
ipnserver	ipn/ipnauth: improve the Windows token administrator check	2023-11-03 14:37:04 -06:00
ipnstate	client/web: restrict full management client behind browser sessions	2023-10-05 17:21:39 -04:00
localapi	ipn/localapi: make serveTKASign require write permission (#10094)	2023-11-02 17:01:26 -06:00
policy	ipn: prefer allow/denylist terminology	2023-04-04 08:02:50 -07:00
store	cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating	2023-08-29 13:24:05 -07:00
backend.go	cmd/tailscale,ipn/ipnlocal: print debug component names	2023-10-03 06:07:34 -07:00
conf.go	ipn: add user pref for running web client	2023-10-31 10:34:56 -07:00
doc.go	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
fake_test.go	all: update copyright and license headers	2023-01-27 15:36:29 -08:00
ipn_clone.go	ipn: introduce app connector advertisement preference and flags	2023-11-01 10:58:54 -07:00
ipn_test.go	net/packet: split off checksum munging into different pkg	2023-10-11 14:25:58 -07:00
ipn_view.go	ipn: introduce app connector advertisement preference and flags	2023-11-01 10:58:54 -07:00
prefs_test.go	ipn: introduce app connector advertisement preference and flags	2023-11-01 10:58:54 -07:00
prefs.go	ipn: introduce app connector advertisement preference and flags	2023-11-01 10:58:54 -07:00
serve_test.go	ipn/localapi: require local Windows admin to set serve path (#9969)	2023-10-26 14:40:44 -07:00
serve.go	ipn/localapi: require local Windows admin to set serve path (#9969)	2023-10-26 14:40:44 -07:00
store_test.go	ipn: avoid useless no-op WriteState calls	2023-08-07 08:44:24 -07:00
store.go	ipn: avoid useless no-op WriteState calls	2023-08-07 08:44:24 -07:00