You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Brad Fitzpatrick 4a82b317b7 ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation
The GitHub CodeQL scanner flagged the localapi's cert domain usage as a problem
because user input in the URL made it to disk stat checks.

The domain is validated against the ipnstate.Status later, and only
authenticated root/configured users can hit this, but add some
paranoia anyway.

Change-Id: I373ef23832f1d8b3a27208bc811b6588ae5a1ddd
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2 years ago
..
c2n.go tailcfg, control/controlclient, ipn/ipnlocal: add c2n (control-to-node) system 2 years ago
dnsconfig_test.go all: convert more code to use net/netip directly 2 years ago
local.go envknob: support changing envknobs post-init 2 years ago
local_test.go envknob: support changing envknobs post-init 2 years ago
loglines_test.go ipn/store: add common package for instantiating ipn.StateStores 3 years ago
network-lock.go envknob: support changing envknobs post-init 2 years ago
peerapi.go ipn/{ipnlocal,localapi}: use strs.CutPrefix, add more domain validation 2 years ago
peerapi_h2c.go wasm: exclude code that's not used on iOS for Wasm too 2 years ago
peerapi_macios_ext.go all: convert more code to use net/netip directly 2 years ago
peerapi_test.go refactor: move from io/ioutil to io and os packages 2 years ago
ssh.go refactor: move from io/ioutil to io and os packages 2 years ago
ssh_stub.go ssh: make it build on darwin 3 years ago
ssh_test.go ipn/ipnlocal: blend existing host SSH keys + newly-generated types as needed 2 years ago
state_test.go syncs, all: move to using Go's new atomic types instead of ours 2 years ago