From cbb371fb781e7e878ff853eeaad2a4bfa820d653 Mon Sep 17 00:00:00 2001 From: stypr Date: Sun, 20 Oct 2024 20:05:12 +0900 Subject: [PATCH] Update tailscale.go to prevent malicious file download If the network is compromised and `cdn.sipeed.com` is redirected to attacker's domain, malicious file can be deployed onto NanoKVM since it's transferred over https. It would be nice to just keep this as https since CDN already supports https at the moment. --- server/service/network/tailscale.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/service/network/tailscale.go b/server/service/network/tailscale.go index 8aeaad8..deef33e 100644 --- a/server/service/network/tailscale.go +++ b/server/service/network/tailscale.go @@ -68,7 +68,7 @@ func (s *Service) InstallTailscale(c *gin.Context) { } const ( - downloadUrl = "http://cdn.sipeed.com/nanokvm/resources/tailscale_riscv64.zip" + downloadUrl = "https://cdn.sipeed.com/nanokvm/resources/tailscale_riscv64.zip" workspace = "/root/.tailscale" )