diff options
| author | Patrick O'Doherty <patrick@tailscale.com> | 2025-05-15 14:26:19 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-05-15 14:26:19 -0700 |
| commit | 336b3b7df0ab8f9877dcf0b62a09851e4c5178a3 (patch) | |
| tree | 240a56ef64d17c8343ff85d7904d984268788bdf /control/controlhttp/controlhttpserver | |
| parent | 824985afe1767c49a1337974cfeceaa07ad8fdbd (diff) | |
| download | tailscale-336b3b7df0ab8f9877dcf0b62a09851e4c5178a3.tar.xz tailscale-336b3b7df0ab8f9877dcf0b62a09851e4c5178a3.zip | |
cmd/proxy-to-grafana: strip X-Webauth* headers from all requests (#15985)
Update proxy-to-grafana to strip any X-Webauth prefixed headers passed
by the client in *every* request, not just those to /login.
/api/ routes will also accept these headers to authenticate users,
necessitating their removal to prevent forgery.
Updates tailscale/corp#28687
Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions