You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/safeweb
Patrick O'Doherty 3177e50b14
safeweb: Set Cross-Origin-Opener-Policy for browser requests (#15936)
Set Cross-Origin-Opener-Policy: same-origin for all browser requests to
prevent window.location manipulation by malicious origins.

Updates tailscale/corp#28480

Thank you to Triet H.M. Pham for the report.

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
7 months ago
..
http.go safeweb: Set Cross-Origin-Opener-Policy for browser requests (#15936) 7 months ago
http_test.go safeweb: add support for custom CSP (#13975) 1 year ago