diff options
| author | Chris Palmer <cpalmer@tailscale.com> | 2023-12-13 14:28:50 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-13 14:28:50 -0800 |
| commit | b62a3fc89535756de2aa05ee3f298ef563bdbd34 (patch) | |
| tree | 1af9900b652b785fdf5e957d1b380ea3e0ff0ebf /control/controlknobs/controlknobs.go | |
| parent | 727acf96a6864493d1741c78d06662739b139ec2 (diff) | |
| download | tailscale-b62a3fc89535756de2aa05ee3f298ef563bdbd34.tar.xz tailscale-b62a3fc89535756de2aa05ee3f298ef563bdbd34.zip | |
client/web: keep redirects on-site (#10525)
Ensure we don't create Location: header URLs that have leading //, which is a
schema-less reference to arbitrary 3rd-party sites. That is, //example.com/foo
redirects off-site, while /example.com/foo is an on-site path URL.
Fixes tailscale/corp#16268
Signed-off-by: Chris Palmer <cpalmer@tailscale.com>
Diffstat (limited to 'control/controlknobs/controlknobs.go')
0 files changed, 0 insertions, 0 deletions