Audit of 3560327

2026-10-20 22:40:00 -07:00
parent 76eacb12a0
commit 9af1463507
3 changed files with 12 additions and 3 deletions
@@ -131,6 +131,10 @@ func (m *Manager) servePreview(port int) error {
 			http.Error(w, err.Error(), http.StatusForbidden)
 			return
 		}
+		if who.Node.IsTagged() {
+			http.Error(w, "tagged nodes are not users", http.StatusForbidden)
+			return
+		}
 		r.Header.Set("Tailscale-User-Login", who.UserProfile.LoginName)
 		r.Header.Set("Tailscale-User-Name", who.UserProfile.DisplayName)
 		proxy.ServeHTTP(w, r)