Patrick O'Doherty a05924a9e5 client/web: add Sec-Fetch-Site CSRF protection (#16046) ...

RELNOTE=Fix CSRF errors in the client Web UI

Replace gorilla/csrf with a Sec-Fetch-Site based CSRF protection
middleware that falls back to comparing the Host & Origin headers if no
SFS value is passed by the client.

Add an -origin override to the web CLI that allows callers to specify
the origin at which the web UI will be available if it is hosted behind
a reverse proxy or within another application via CGI.

Updates #14872
Updates #15065

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>

2025-05-22 12:26:02 -07:00

..

ffcomplete

all: add test for package comments, fix, add comments as needed

2024-07-10 09:57:00 -07:00

advertise.go

tailcfg: add ServiceName

2025-01-22 15:27:46 -05:00

bugreport.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

cert.go

cmd/tailscale: add --min-validity flag to the cert command (#12822)

2024-07-19 09:35:22 -07:00

cli_test.go

cmd/tailscale/cli: rename "--posture-checking" to "--report-posture"

2025-05-06 07:44:57 -07:00

cli.go

cmd/tailscale/cli: suggest using "tailscale set", not "up", to set operator

2025-05-19 12:21:10 -07:00

configure_apple-all.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

configure_apple.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

configure-kube_omit.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

configure-kube_test.go

cmd/tailscale/cli: fix configuring partially empty kubeconfig (#11417)

2024-03-14 20:26:20 +00:00

configure-kube.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

configure-synology-cert_test.go

cmd/tailscale/cli: Add CLI command to update certs on Synology devices.

2024-04-05 07:08:46 -07:00

configure-synology-cert.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

configure-synology.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

configure.go

cmd/tailscale: define CLI tools to manipulate macOS network and system extensions (#14727)

2025-01-22 16:01:07 -08:00

debug-capture.go

feature/capture: move packet capture to feature/*, out of iOS + CLI

2025-01-24 17:52:43 -08:00

debug.go

net/netmon: publish events to event bus

2025-04-16 10:10:45 -07:00

diag_other.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

diag.go

various: add detection and Taildrop for Unraid

2023-05-04 13:40:13 -07:00

dns-query.go

cli: add tailscale dns query (#13368)

2024-09-24 20:18:45 +00:00

dns-status.go

cli: add tailscale dns query (#13368)

2024-09-24 20:18:45 +00:00

dns.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

down.go

cmd/tailscale/cli: update tailscale down to accept an optional --reason

2025-02-03 11:07:55 -06:00

drive.go

cmd/tailscale: resolve taildrive share paths

2024-07-12 11:47:48 -05:00

exitnode_test.go

all: fix new lint warnings from bumping staticcheck

2024-08-22 12:31:08 -07:00

exitnode.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

file.go

cmd/tailscale/cli: omit "file" subcommand if taildrop is omitted from build

2025-05-07 07:25:23 -07:00

funnel.go

cli/funnel: fix comment typo (#14840)

2025-01-30 14:21:32 -08:00

id-token.go

cmd/tailscale: add shell tab-completion

2024-04-17 18:54:10 +01:00

ip.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

licenses.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

login.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

logout.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

metrics.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

nc.go

cmd/tailscale: add shell tab-completion

2024-04-17 18:54:10 +01:00

netcheck.go

net/netmon: publish events to event bus

2025-04-16 10:10:45 -07:00

network-lock.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

ping.go

cmd/tailscale: add shell tab-completion

2024-04-17 18:54:10 +01:00

risks.go

all: fix golangci-lint errors

2025-01-07 13:05:37 -08:00

serve_legacy_test.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

serve_legacy.go

all: use new LocalAPI client package location

2025-02-05 14:41:42 -08:00

serve_v2_test.go

fix: broken tests for localhost

2024-06-26 20:57:19 -07:00

serve_v2.go

util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps

2025-01-03 10:48:31 -08:00

set_test.go

cmd/tailscale/cli: prevent all dup flags, not just strings

2025-04-08 14:48:43 -07:00

set.go

cmd/tailscale/cli: rename "--posture-checking" to "--report-posture"

2025-05-06 07:44:57 -07:00

ssh_exec_js.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ssh_exec_windows.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ssh_exec.go

all: update copyright and license headers

2023-01-27 15:36:29 -08:00

ssh_unix.go

types/logger, cmd/tailscale/cli: flesh out, simplify some non-unix build tags

2023-08-24 03:41:13 -07:00

ssh.go

cmd/tailscale: make ssh command work when tailscaled is built with the ts_include_cli tag

2025-02-06 12:55:40 -06:00

status.go

net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon

2024-04-28 07:34:52 -07:00

switch.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

syspolicy.go

cmd/tailscale: fix, test some recent doc inconsistencies

2025-01-23 18:51:16 -08:00

up_test.go

cmd/tailscale/cli: rename "--posture-checking" to "--report-posture"

2025-05-06 07:44:57 -07:00

up.go

cmd/tailscale/cli: rename "--posture-checking" to "--report-posture"

2025-05-06 07:44:57 -07:00

update.go

cmd/tailscale/cli: do not allow update --version on macOS (#12508)

2024-06-17 10:33:26 -07:00

version.go

cmd/tailscale/cli: prefix all --help usages with "tailscale ...", some tidying

2024-04-09 12:52:34 +01:00

web_test.go

client/web: extract web client from cli package

2023-08-09 09:53:37 -07:00

web.go

client/web: add Sec-Fetch-Site CSRF protection (#16046)

2025-05-22 12:26:02 -07:00

whois.go

proxymap, various: distinguish between different protocols

2024-06-18 13:29:41 -04:00