You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/client/web
Patrick O'Doherty f5522e62d1
client/web: fix CSRF handler order in web UI (#15143)
Fix the order of the CSRF handlers (HTTP plaintext context setting,
_then_ enforcement) in the construction of the web UI server. This
resolves false-positive "invalid Origin" 403 exceptions when attempting
to update settings in the web UI.

Add unit test to exercise the CSRF protection failure and success cases
for our web UI configuration.

Updates #14822
Updates #14872

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
9 months ago
..
build client/web: precompress assets 2 years ago
src client/web: remove advanced options from web client login (#14770) 10 months ago
assets.go client/web: only add cache header for assets 2 years ago
auth.go all: use Go 1.22 range-over-int 2 years ago
index.html client/web: use CSP hash for inline javascript 2 years ago
package.json {tool,client}: bump node version (#12840) 1 year ago
qnap.go client/web: add readonly/manage toggle 2 years ago
styles.json client/web: adjust colors and some UI margins 2 years ago
synology.go client/web: add readonly/manage toggle 2 years ago
tailwind.config.js client/web: fix Vite CJS deprecation warning (#11288) 2 years ago
tsconfig.json client/web: update vite and vitest to latest versions (#11200) 2 years ago
vite.config.ts client/web: update vite and vitest to latest versions (#11200) 2 years ago
web.go client/web: fix CSRF handler order in web UI (#15143) 9 months ago
web_test.go client/web: fix CSRF handler order in web UI (#15143) 9 months ago
yarn.lock build(deps): bump ws from 8.14.2 to 8.17.1 in /client/web (#12524) 1 year ago