You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/client/web
Brad Fitzpatrick 8bd04bdd3a
go.mod: bump gorilla/csrf for security fix (#14822)
For 9dd6af1f6d

Update client/web and safeweb to correctly signal to the csrf middleware
whether the request is being served over TLS. This determines whether
Origin and Referer header checks are strictly enforced. The gorilla
library previously did not enforce these checks due to a logic bug based
on erroneous use of the net/http.Request API. The patch to fix this also
inverts the library behavior to presume that every request is being
served over TLS, necessitating these changes.

Updates tailscale/corp#25340

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
Co-authored-by: Patrick O'Doherty <patrick@tailscale.com>
10 months ago
..
build client/web: precompress assets 2 years ago
src client/web: remove advanced options from web client login (#14770) 10 months ago
assets.go client/web: only add cache header for assets 2 years ago
auth.go all: use Go 1.22 range-over-int 2 years ago
index.html client/web: use CSP hash for inline javascript 2 years ago
package.json {tool,client}: bump node version (#12840) 1 year ago
qnap.go client/web: add readonly/manage toggle 2 years ago
styles.json client/web: adjust colors and some UI margins 2 years ago
synology.go client/web: add readonly/manage toggle 2 years ago
tailwind.config.js client/web: fix Vite CJS deprecation warning (#11288) 2 years ago
tsconfig.json client/web: update vite and vitest to latest versions (#11200) 2 years ago
vite.config.ts client/web: update vite and vitest to latest versions (#11200) 2 years ago
web.go go.mod: bump gorilla/csrf for security fix (#14822) 10 months ago
web_test.go client/web: use grants on web UI frontend 2 years ago
yarn.lock build(deps): bump ws from 8.14.2 to 8.17.1 in /client/web (#12524) 1 year ago