Percy Wegmann 0c11fd978b drive: use secret token to authenticate access to file server on localhost ...

This prevents Mark-of-the-Web bypass attacks in case someone visits the
localhost WebDAV server directly.

Fixes tailscale/corp#19592

Signed-off-by: Percy Wegmann <percy@tailscale.com>

2024-05-03 09:03:32 -05:00

..

compositedav

drive: use secret token to authenticate access to file server on localhost

2024-05-03 09:03:32 -05:00

dirfs

…

shared

drive: rewrite Location headers

2024-04-18 15:50:18 -05:00

birthtiming_test.go

…

birthtiming.go

…

connlistener_test.go

…

connlistener.go

…

drive_test.go

drive: use secret token to authenticate access to file server on localhost

2024-05-03 09:03:32 -05:00

fileserver.go

drive: use secret token to authenticate access to file server on localhost

2024-05-03 09:03:32 -05:00

local_impl.go

drive: use secret token to authenticate access to file server on localhost

2024-05-03 09:03:32 -05:00

remote_impl.go

drive: use secret token to authenticate access to file server on localhost

2024-05-03 09:03:32 -05:00