tailscale/ipn/ipnlocal
Brad Fitzpatrick 4a82b317b7 ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation
The GitHub CodeQL scanner flagged the localapi's cert domain usage as a problem
because user input in the URL made it to disk stat checks.

The domain is validated against the ipnstate.Status later, and only
authenticated root/configured users can hit this, but add some
paranoia anyway.

Change-Id: I373ef23832f1d8b3a27208bc811b6588ae5a1ddd
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-09-16 05:52:33 -07:00
..
c2n.go tailcfg, control/controlclient, ipn/ipnlocal: add c2n (control-to-node) system 2022-08-29 15:18:40 -07:00
dnsconfig_test.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
local_test.go envknob: support changing envknobs post-init 2022-09-15 15:04:02 -07:00
local.go envknob: support changing envknobs post-init 2022-09-15 15:04:02 -07:00
loglines_test.go ipn/store: add common package for instantiating ipn.StateStores 2022-02-28 13:23:33 -08:00
network-lock.go envknob: support changing envknobs post-init 2022-09-15 15:04:02 -07:00
peerapi_h2c.go wasm: exclude code that's not used on iOS for Wasm too 2022-06-06 13:52:52 -07:00
peerapi_macios_ext.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
peerapi_test.go refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
peerapi.go ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation 2022-09-16 05:52:33 -07:00
ssh_stub.go ssh: make it build on darwin 2022-02-24 13:00:45 -08:00
ssh_test.go ipn/ipnlocal: blend existing host SSH keys + newly-generated types as needed 2022-07-28 11:42:58 -07:00
ssh.go refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
state_test.go syncs, all: move to using Go's new atomic types instead of ours 2022-08-04 07:47:59 -07:00