File tree Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Expand file tree Collapse file tree 1 file changed +4
-1
lines changed Original file line number Diff line number Diff line change @@ -26,12 +26,15 @@ version! It's as safe and stable as
26
26
[ tclip] ( https://github.com/tailscale-dev/tclip ) is because this proxy uses the
27
27
exact same primitives.
28
28
29
- > ** Warning **
29
+ > [ !WARNING ] About header authentication security
30
30
> You can count on the headers sent by ts-proxy as long as you follow the following conditions:
31
31
> - Anything that changes the headers name representation such as Apache with PHP could be cheated
32
32
> by passing the header TAILSCALE_USER_LOGIN, for example.
33
+ >
33
34
> - If some users can access your actual service directly without passing the traffic through ts-proxy
34
35
they can change all the headers they want, including authentication ones.
36
+ >
37
+ > - If you don't use the header authentication for anything in a given service these issues will not be a problem for that service.
35
38
36
39
37
40
## Usage
You can’t perform that action at this time.
0 commit comments