summaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)AuthorFilesLines
2023-11-06version/mkversion: override patch version to 1awly/version-overrideAndrew Lytvynov1-0/+1
2023-11-06derp/derphttp: use a getter method to read server keyAnton Tolchanov1-1/+1
2023-11-05control/controlclient: move watchdog out of mapSessionBrad Fitzpatrick2-70/+38
2023-11-05control/controlclient: move lastPrintMap field from Direct to mapSessionBrad Fitzpatrick3-28/+24
2023-11-05client/tailscale: remove redundant error checkMatt Layher1-3/+0
2023-11-05client/web: relax CSP restrictions for manage clientWill Norris1-3/+6
2023-11-04syspolicy: add Allow LAN Access visibility key (#10113)Claire Wang1-0/+1
2023-11-04derp/derphttp: fix derptrack fixBrad Fitzpatrick2-1/+65
2023-11-03go.mod.sri: update SRI hash for go.mod changesFlakes Updater3-3/+3
2023-11-03cmd/tailscale: respect existing web client prefWill Norris1-5/+11
2023-11-03go.mod: update web-client-prebuiltWill Norris2-3/+3
2023-11-03client/web: check r.Host rather than r.URL.HostWill Norris1-1/+1
2023-11-03client/web: add some security checks for full clientWill Norris5-4/+161
2023-11-03ipn/ipnauth: improve the Windows token administrator checkAaron Klotz3-9/+49
2023-11-03client/web: move auth session creation out of /api/authSonia Appasamy5-97/+176
2023-11-03ipn/ipnlocal: serve web client on quad100 if enabledWill Norris1-0/+3
2023-11-03types/dnstype: update the usage documentation on dnstype.ResolverJames Tucker1-0/+2
2023-11-02client/web: fill devMode from an env varSonia Appasamy4-16/+8
2023-11-02ipn/localapi: make serveTKASign require write permission (#10094)Andrew Lytvynov1-2/+2
2023-11-02client/web: add ServerMode to web.ServerSonia Appasamy5-40/+114
2023-11-02clientupdate: do not recursively delete dirs in cleanupOldDownloads (#10093)Andrew Lytvynov2-2/+125
2023-11-02client/web: limit authorization checks to API callsWill Norris6-94/+97
2023-11-02appc,cmd/sniproxy,ipn/ipnlocal: split sniproxy configuration code out of appcJames Tucker11-51/+43
2023-11-02clientupdate: cleanup SPK and MSI downloads (#10085)Andrew Lytvynov1-0/+15
2023-11-02ipn/ipnlocal: include web client port in setTCPPortsInterceptedSonia Appasamy1-0/+6
2023-11-02ipn/localapi: remove webclient endpointSonia Appasamy1-42/+4
2023-11-02ipn/ipnlocal: pull CapabilityPreviewWebClient into webClientAtomicBoolSonia Appasamy2-9/+12
2023-11-02ipn/localapi: require Write access on /watch-ipn-bus with private keys (#10059)Andrew Lytvynov2-1/+107
2023-11-02cmd/tailscaled: pre-load wintun.dll using a fully-qualified pathAaron Klotz1-1/+23
2023-11-02cmd/k8s-operator: set different app type for operator with proxy (#10081)Irbe Krumina2-6/+12
2023-11-01util/groupmember: fail earlier if group doesn't exist, use slices.ContainsBrad Fitzpatrick1-8/+4
2023-11-01ipn/ipnlocal,tailcfg: add AppConnector service to HostInfo when configuredJames Tucker4-7/+39
2023-11-01appc,ipn/ipnlocal: add App Connector domain configuration from mapcapJames Tucker5-5/+101
2023-11-01tstest/deptest: fix minor escaping error in regexJames Tucker1-1/+1
2023-11-01appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when enabled in ...James Tucker9-15/+518
2023-11-01ipn/ipnlocal: prevent deadlock on WebClientShutdownWill Norris1-1/+1
2023-11-01client/web: move more session logic to auth.goSonia Appasamy3-35/+58
2023-11-01build(deps): bump github.com/docker/dockerdependabot[bot]2-3/+3
2023-11-01build(deps-dev): bump postcss from 8.4.27 to 8.4.31 in /client/webdependabot[bot]2-5/+5
2023-11-01build(deps): bump get-func-name from 2.0.0 to 2.0.2 in /client/webdependabot[bot]1-3/+3
2023-11-01build(deps): bump @babel/traverse from 7.22.10 to 7.23.2 in /client/webdependabot[bot]1-15/+75
2023-11-01web/client: update synology token from /api/auth callWill Norris3-6/+37
2023-11-01.github: Bump actions/checkout from 3 to 4dependabot[bot]1-1/+1
2023-11-01clientupdate: clarify how to run update as Administrator on Windows (#10043)Andrew Lytvynov1-1/+6
2023-11-01hostinfo: fix a couple of logic simplification lintsJames Tucker1-8/+2
2023-11-01cmd/k8s-operator: strip credentials from client config in noauth modeDavid Anderson1-0/+3
2023-11-01ipn/ipnlocal: fix small typoJames Tucker1-1/+1
2023-11-01client/web: call /api/auth before rendering any client viewsWill Norris2-21/+19
2023-11-01cmd/k8s-operator: sanitize connection headers (#10063)Rhea Ghosh1-10/+11
2023-11-01ipn: introduce app connector advertisement preference and flagsJames Tucker7-0/+108