Skip to content

Commit

Permalink
README: fix admonition
Browse files Browse the repository at this point in the history
Signed-off-by: lucasew <lucas59356@gmail.com>
  • Loading branch information
lucasew committed Nov 11, 2024
1 parent 9943cd0 commit 8931029
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,15 @@ version! It's as safe and stable as
[tclip](https://github.com/tailscale-dev/tclip) is because this proxy uses the
exact same primitives.

> **Warning**
> [!WARNING] About header authentication security
> You can count on the headers sent by ts-proxy as long as you follow the following conditions:
> - Anything that changes the headers name representation such as Apache with PHP could be cheated
> by passing the header TAILSCALE_USER_LOGIN, for example.
>
> - If some users can access your actual service directly without passing the traffic through ts-proxy
they can change all the headers they want, including authentication ones.
>
> - If you don't use the header authentication for anything in a given service these issues will not be a problem for that service.

## Usage
Expand Down

0 comments on commit 8931029

Please sign in to comment.