Skip to content

Commit 8931029

Browse files
committed
README: fix admonition
Signed-off-by: lucasew <lucas59356@gmail.com>
1 parent 9943cd0 commit 8931029

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

README.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,15 @@ version! It's as safe and stable as
2626
[tclip](https://github.com/tailscale-dev/tclip) is because this proxy uses the
2727
exact same primitives.
2828

29-
> **Warning**
29+
> [!WARNING] About header authentication security
3030
> You can count on the headers sent by ts-proxy as long as you follow the following conditions:
3131
> - Anything that changes the headers name representation such as Apache with PHP could be cheated
3232
> by passing the header TAILSCALE_USER_LOGIN, for example.
33+
>
3334
> - If some users can access your actual service directly without passing the traffic through ts-proxy
3435
they can change all the headers they want, including authentication ones.
36+
>
37+
> - If you don't use the header authentication for anything in a given service these issues will not be a problem for that service.
3538
3639

3740
## Usage

0 commit comments

Comments
 (0)