You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/client/web
Brad Fitzpatrick 8bd04bdd3a
go.mod: bump gorilla/csrf for security fix (#14822)
For 9dd6af1f6d

Update client/web and safeweb to correctly signal to the csrf middleware
whether the request is being served over TLS. This determines whether
Origin and Referer header checks are strictly enforced. The gorilla
library previously did not enforce these checks due to a logic bug based
on erroneous use of the net/http.Request API. The patch to fix this also
inverts the library behavior to presume that every request is being
served over TLS, necessitating these changes.

Updates tailscale/corp#25340

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
Co-authored-by: Patrick O'Doherty <patrick@tailscale.com>
12 months ago
..
build
src client/web: remove advanced options from web client login (#14770) 1 year ago
assets.go
auth.go all: use Go 1.22 range-over-int 2 years ago
index.html
package.json {tool,client}: bump node version (#12840) 2 years ago
qnap.go
styles.json
synology.go
tailwind.config.js client/web: fix Vite CJS deprecation warning (#11288) 2 years ago
tsconfig.json client/web: update vite and vitest to latest versions (#11200) 2 years ago
vite.config.ts client/web: update vite and vitest to latest versions (#11200) 2 years ago
web.go go.mod: bump gorilla/csrf for security fix (#14822) 12 months ago
web_test.go client/web: use grants on web UI frontend 2 years ago
yarn.lock build(deps): bump ws from 8.14.2 to 8.17.1 in /client/web (#12524) 1 year ago