You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/derper
David Anderson db800ddeac cmd/derper: set Content-Security-Policy on DERPs.
It's a basic "deny everything" policy, since DERP's HTTP
server is very uninteresting from a browser POV. But it
stops every security scanner under the sun from reporting
"dangerously configured" HTTP servers.

Updates tailscale/corp#3119

Signed-off-by: David Anderson <danderson@tailscale.com>
3 years ago
..
bootstrap_dns.go cmd/derper: add /bootstrap-dns handler 4 years ago
cert.go cmd/derper: support manual TLS certificate mode (#2793) 3 years ago
derper.go cmd/derper: set Content-Security-Policy on DERPs. 3 years ago
derper_test.go cmd/derper: refactor STUN path for testing, add serverSTUN benchmark 3 years ago
mesh.go derp: use new node key type. 3 years ago
websocket.go cmd/derper, derp/derphttp: add websocket support 3 years ago