Will Norris c615fe2296 client/web: add security attributes on session cookie ...

Limit cookies to HTTP requests (not accessible from javascript).
Set SameSite to "Lax", which is similar to "Strict" but allows for
cookies to be included in requests that come from offsite links.  This
will be necessary when we link to the web client from the admin console.

Updates #10261
Fixes tailscale/corp#16265

Signed-off-by: Will Norris <will@tailscale.com>

2023-12-08 16:18:05 -08:00

..

build

client/web: precompress assets

2023-12-07 20:57:31 -05:00

src

client/web: small UI cleanups

2023-12-08 12:45:09 -05:00

assets.go

client/web: precompress assets

2023-12-07 20:57:31 -05:00

auth.go

client/web: add logging of device management type for web client (#10492)

2023-12-08 13:15:57 -07:00

index.html

client/web: small tweaks for small screens

2023-12-05 08:05:09 -08:00

package.json

client/web: start using swr for some fetching

2023-12-06 21:20:13 -05:00

qnap.go

client/web: add readonly/manage toggle

2023-11-10 15:01:34 -05:00

styles.json

client/web: adjust colors and some UI margins

2023-12-01 15:41:57 -05:00

synology.go

client/web: add readonly/manage toggle

2023-11-10 15:01:34 -05:00

tailwind.config.js

client/web: adjust colors and some UI margins

2023-12-01 15:41:57 -05:00

tsconfig.json

client/web: add debug mode for web client ui updates

2023-09-28 15:45:33 -04:00

vite.config.ts

client/web: fix hotreload proxy

2023-11-06 16:31:30 -05:00

web_test.go

client/web: add logging of device management type for web client (#10492)

2023-12-08 13:15:57 -07:00

web.go

client/web: add security attributes on session cookie

2023-12-08 16:18:05 -08:00

yarn.lock

client/web: start using swr for some fetching

2023-12-06 21:20:13 -05:00