tailscale/ipn
Brad Fitzpatrick 4a82b317b7 ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation
The GitHub CodeQL scanner flagged the localapi's cert domain usage as a problem
because user input in the URL made it to disk stat checks.

The domain is validated against the ipnstate.Status later, and only
authenticated root/configured users can hit this, but add some
paranoia anyway.

Change-Id: I373ef23832f1d8b3a27208bc811b6588ae5a1ddd
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-09-16 05:52:33 -07:00
..
ipnlocal ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation 2022-09-16 05:52:33 -07:00
ipnserver refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
ipnstate cmd/tailscale: add emoji for illumos in status subcommand 2022-08-28 08:29:31 -07:00
localapi ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation 2022-09-16 05:52:33 -07:00
policy ipn/policy: treat DNS service as interesting so it's not filtered out 2021-12-03 12:55:54 -08:00
store refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
backend.go all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
doc.go Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
fake_test.go ipn/ipnlocal: move Ping method from IPN bus to LocalBackend (HTTP) 2022-05-03 15:59:19 -07:00
handle.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
ipn_clone.go cmd/tailscale/cli: add backwards compatibility 'up' processing for legacy client 2022-09-01 14:21:48 -07:00
message_test.go all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
message.go all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
prefs_test.go refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
prefs.go refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
store.go assorted: plumb tka initialization & network-lock key into tailscaled 2022-08-03 14:51:47 -07:00