| Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
Not useful enought just yet
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Conditionally embedding based on
https://github.com/golang/go/issues/44484#issuecomment-948137497
To use it, wget the discovery files into the internal/discovery
folder (same JSON name) after verifying the signature. Then build with -tags=release
|
|
This prevents someone from spamming the local redirect URI and sending
additional outgoing token requests to the legitimate server
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This commit validates the server endpoints by checking the Host and
scheme of each URL to check if they match eachother. This is to
prevent further mixup attacks
|
|
|
|
|
|
|
|
|
|
This prevents scripts from being executed by default. Clients can
override this by either using the OpenVPN --script-security flag or
add a script-security setting themselves.
|
|
We rewrite URLs anyway so this is still fine but let's not make it so confusing
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
It's always secure internet, no need to pass it as an argument
|
|
|
|
|
|
|