Patrick O'Doherty 336b3b7df0

cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985) ...

Update proxy-to-grafana to strip any X-Webauth prefixed headers passed
by the client in *every* request, not just those to /login.

/api/ routes will also accept these headers to authenticate users,
necessitating their removal to prevent forgery.

Updates tailscale/corp#28687

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>

2025-05-15 14:26:19 -07:00

..

addlicense

all: fix golangci-lint errors

2025-01-07 13:05:37 -08:00

build-webclient

client/web: precompress assets

2023-12-07 20:57:31 -05:00

checkmetrics

cmd/checkmetrics: add command for checking metrics against kb

2024-12-02 10:30:46 +01:00

cloner

cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types

2024-08-23 15:43:40 -05:00

connector-gen

cmd/connector-gen: add helper tool for wide app connector configurations

2023-12-15 09:29:42 -08:00

containerboot

cmd/{containerboot,k8s-operator},kube/kubetypes: unadvertise ingress services on shutdown (#15451)

2025-04-09 10:11:15 +01:00

derper

tsweb/varz: export GC CPU fraction gauge

2025-04-28 11:52:21 -07:00

derpprobe

cmd/derpprobe: exit with non-zero status if --once fails (#15926)

2025-05-12 12:53:55 -07:00

dist

cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key

2025-04-17 08:39:31 -05:00

get-authkey

cmd,tsnet,internal/client: create internal shim to deprecated control plane API

2025-02-18 10:23:04 -06:00

gitops-pusher

cmd/gitops-pusher: log error details when unable to fetch ACL ETag

2025-02-18 14:29:14 -06:00

hello

cmd/hello: display native ipv4 (#15191)

2025-03-04 08:47:35 -07:00

k8s-nameserver

cmd/k8s-nameserver: fix AAAA record query response (#12412)

2024-06-10 17:57:22 +01:00

k8s-operator

cmd/k8s-operator: warn if Tailscale Services use attempted for tailnet without the feature enabled (#15931)

2025-05-14 18:25:08 +01:00

mkmanifest

cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS

2023-03-01 15:45:12 -07:00

mkpkg

go.mod: upgrade nfpm to v2 (#8786)

2023-08-03 13:00:45 -07:00

mkversion

version/mkversion: open-source version generation logic

2023-02-18 05:21:05 +00:00

nardump

cmd/nardump: support symlinks, add basic test

2025-04-07 19:24:51 -07:00

natc

cmd/natc: cleanup unused state

2025-04-14 14:06:56 -07:00

netlogfmt

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

nginx-auth

tailcfg,all: add and use Node.IsTagged()

2023-03-13 08:44:25 -07:00

pgproxy

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

printdep

cmd/printdep: print correct toolchain URL

2023-02-11 17:57:36 +00:00

proxy-to-grafana

cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985)

2025-05-15 14:26:19 -07:00

sniproxy

net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl

2025-04-08 10:07:47 -07:00

speedtest

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ssh-auth-none-demo

ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh

2025-01-31 16:36:39 -06:00

stunc

cmd/stunc: enforce read timeout deadline (#14309)

2024-12-06 14:27:52 -05:00

stund

tsweb/varz: export GC CPU fraction gauge

2025-04-28 11:52:21 -07:00

stunstamp

cmd/stunstamp: add protocol context to timeout logs (#13422)

2024-09-09 18:42:13 -07:00

sync-containers

all: adjust some build tags for plan9

2023-08-24 15:42:35 -07:00

systray

cmd/systray: add cmd/systray back as a small client/systray wrapper

2025-01-06 16:49:34 -08:00

tailscale

cmd/tailscale/cli: omit "file" subcommand if taildrop is omitted from build

2025-05-07 07:25:23 -07:00

tailscaled

ipn/ipnlocal,net/dns/resolver: use the user dialer and routes for DNS forwarding by default, except on iOS and Android

2025-05-09 16:43:01 -05:00

testcontrol

all: use Go 1.22 range-over-int

2024-04-16 15:32:38 -07:00

testwrapper

cmd/testwrapper: print failed tests preventing retry (#15270)

2025-03-13 14:21:29 +00:00

tl-longchain

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

tsconnect

all: update the tsd.System constructor name (#15372)

2025-04-16 10:10:45 -07:00

tsidp

cmd/tsidp: remove backticks in README in shell example

2025-05-01 12:18:50 -07:00

tsshd

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

tta

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

viewer

cmd/viewer,all: consistently use "read-only" instead of "readonly"

2025-01-14 08:26:56 -08:00

vnet

cmd/vnet: add wsproxy mode

2025-03-29 11:02:42 -07:00

xdpderper

tsweb: split promvarz into an optional dependency

2025-03-18 16:57:04 -07:00