You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/client
Patrick O'Doherty ac4b0962d8
client/web: fix CSRF handler order in web UI (#15143) (#15156)
Fix the order of the CSRF handlers (HTTP plaintext context setting,
_then_ enforcement) in the construction of the web UI server. This
resolves false-positive "invalid Origin" 403 exceptions when attempting
to update settings in the web UI.

Add unit test to exercise the CSRF protection failure and success cases
for our web UI configuration.

Updates #14822
Updates #14872

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
11 months ago
..
systray client/systray: record that systray is running 1 year ago
tailscale client/tailscale: fix typo in comment 1 year ago
web client/web: fix CSRF handler order in web UI (#15143) (#15156) 11 months ago