You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Andrew Lytvynov decd9893e4
ipn/ipnlocal: validate domain of PopBrowserURL on default control URL (#11394)
If the client uses the default Tailscale control URL, validate that all
PopBrowserURLs are under tailscale.com or *.tailscale.com. This reduces
the risk of a compromised control plane opening phishing pages for
example.

The client trusts control for many other things, but this is one easy
way to reduce that trust a bit.

Fixes #11393

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
9 months ago
..
conffile ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key 1 year ago
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 10 months ago
ipnlocal ipn/ipnlocal: validate domain of PopBrowserURL on default control URL (#11394) 9 months ago
ipnserver ipn/ipnserver: always allow Windows SYSTEM user to connect 11 months ago
ipnstate wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 9 months ago
localapi ipn/{ipnlocal,localapi}: add debug verb to force spam IPN bus NetMap 9 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 1 year ago
store cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 1 year ago
backend.go ipn,tailfs: tie TailFS share configuration to user profile 9 months ago
conf.go ipn,cmd/tailscale/cli: support hierarchical MaskedPrefs (#10507) 12 months ago
doc.go all: update copyright and license headers 2 years ago
fake_test.go all: update copyright and license headers 2 years ago
ipn_clone.go ipn,tailfs: tie TailFS share configuration to user profile 9 months ago
ipn_test.go net/packet: split off checksum munging into different pkg 1 year ago
ipn_view.go ipn,tailfs: tie TailFS share configuration to user profile 9 months ago
prefs.go ipn,tailfs: tie TailFS share configuration to user profile 9 months ago
prefs_test.go ipn,tailfs: tie TailFS share configuration to user profile 9 months ago
serve.go {ipn,cmd/tailscale/cli}: move ServeConfig mutation logic to ipn/serve 9 months ago
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 9 months ago
store.go ipn: add comment about thread-safety to StateStore 9 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago