mirror of
https://github.com/tailscale/tailscale.git
synced 2025-08-09 15:47:17 +02:00
RELNOTE=Fix CSRF errors in the client Web UI Replace gorilla/csrf with a Sec-Fetch-Site based CSRF protection middleware that falls back to comparing the Host & Origin headers if no SFS value is passed by the client. Add an -origin override to the web CLI that allows callers to specify the origin at which the web UI will be available if it is hosted behind a reverse proxy or within another application via CGI. Updates #14872 Updates #15065 Signed-off-by: Patrick O'Doherty <patrick@tailscale.com> |
||
---|---|---|
.. | ||
build | ||
src | ||
assets.go | ||
auth.go | ||
index.html | ||
package.json | ||
qnap.go | ||
styles.json | ||
synology.go | ||
tailwind.config.js | ||
tsconfig.json | ||
vite.config.ts | ||
web_test.go | ||
web.go | ||
yarn.lock |