diff options
| author | Will Norris <will@tailscale.com> | 2023-11-02 20:05:40 -0700 |
|---|---|---|
| committer | Will Norris <will@willnorris.com> | 2023-11-03 14:15:59 -0700 |
| commit | 6b956b49e029ecc500bfae96a3175a6b4db4811d (patch) | |
| tree | 0dc11b90221a48ebbc5fe05d2dd6c78ddce48d93 /control/controlknobs | |
| parent | fbc18410ad96d4871a3701ebe81531686a4907ac (diff) | |
| download | tailscale-6b956b49e029ecc500bfae96a3175a6b4db4811d.tar.xz tailscale-6b956b49e029ecc500bfae96a3175a6b4db4811d.zip | |
client/web: add some security checks for full client
Require that requests to servers in manage mode are made to the
Tailscale IP (either ipv4 or ipv6) or quad-100. Also set various
security headers on those responses. These might be too restrictive,
but we can relax them as needed.
Allow requests to /ok (even in manage mode) with no checks. This will be
used for the connectivity check from a login client to see if the
management client is reachable.
Updates tailscale/corp#14335
Signed-off-by: Will Norris <will@tailscale.com>
Diffstat (limited to 'control/controlknobs')
0 files changed, 0 insertions, 0 deletions