Administrator/NanoKVM-MIRROR
1
0
Fork 1
mirror of https://github.com/sipeed/NanoKVM.git synced 2026-09-12 10:07:38 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update tailscale.go to prevent malicious file download

Browse Source 
If the network is compromised and `cdn.sipeed.com` is redirected to attacker's domain, malicious file can be deployed onto NanoKVM since it's transferred over https. It would be nice to just keep this as https since CDN already supports https at the moment.
This commit is contained in:
stypr
2024-10-20 20:05:12 +09:00
committed by GitHub
parent bcfa09b03e
commit cbb371fb78
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/service/network/tailscale.go
View File

@@ -68,7 +68,7 @@ func (s *Service) InstallTailscale(c *gin.Context) {
}
const (
downloadUrl = "http://cdn.sipeed.com/nanokvm/resources/tailscale_riscv64.zip"
downloadUrl = "https://cdn.sipeed.com/nanokvm/resources/tailscale_riscv64.zip"
workspace = "/root/.tailscale"
)