mirror of
https://github.com/tailscale/tailscale.git
synced 2025-08-10 08:07:17 +02:00
RELNOTE=Fix CSRF errors in the client Web UI Replace gorilla/csrf with a Sec-Fetch-Site based CSRF protection middleware that falls back to comparing the Host & Origin headers if no SFS value is passed by the client. Add an -origin override to the web CLI that allows callers to specify the origin at which the web UI will be available if it is hosted behind a reverse proxy or within another application via CGI. Updates #14872 Updates #15065 Signed-off-by: Patrick O'Doherty <patrick@tailscale.com> |
||
---|---|---|
.. | ||
assets | ||
components | ||
hooks | ||
ui | ||
utils | ||
api.ts | ||
index.css | ||
index.tsx | ||
types.ts |