Kristoffer Dalby aa4c952bca policy: ignore '#' metadata fields across the whole policy ...

The filter lived in ACL.UnmarshalJSON, so grants, ssh and nodeAttrs still
hit RejectUnknownMembers. Strip the members in the HuJSON AST instead, at
the single decode entrypoint. Grant "app" payloads are left untouched.

Fixes #3479

(cherry picked from commit 5401edb6a8)

2026-09-23 21:19:22 +02:00

..

assets

assets: fix logo alignment and error icon centering

2026-04-13 17:23:47 +01:00

capver

capver, types: bump to tailscale v1.98, drop LegacyDERPString

2026-05-22 11:22:01 +02:00

db

poll: do not cancel ephemeral GC until Connect succeeds

2026-07-29 14:35:31 +02:00

derp

derp: clone regions when merging DERP maps

2026-06-08 10:04:49 +02:00

dns

dns: cancel extra-records retry on shutdown and close watcher on setup error

2026-09-23 21:19:22 +02:00

mapper

mapper: drop empty changes before fan-out

2026-09-23 21:19:22 +02:00

policy

policy: ignore '#' metadata fields across the whole policy

2026-09-23 21:19:22 +02:00

servertest

state: mark expired nodes offline without ending the session

2026-09-23 21:19:22 +02:00

state

state: mark expired nodes offline without ending the session

2026-09-23 21:19:22 +02:00

templates

templates: apply the tvOS setup reorder to the served /apple page

2026-09-23 21:19:22 +02:00

types

types: regenerate node view

2026-09-23 21:19:22 +02:00

util

util: check RNG error before slicing url-safe random string

2026-06-08 10:04:49 +02:00

app_test.go

app: add security headers middleware

2026-04-17 16:31:49 +01:00

app.go

oidc: serve the registration confirmation page from a reloadable URL

2026-09-23 21:19:22 +02:00

auth_tags_test.go

state: do not expire tagged nodes on logout

2026-07-29 14:35:31 +02:00

auth_test.go

state: rename persist helpers to say what they do

2026-09-23 21:19:22 +02:00

auth.go

state: preserve committed node deletion changes

2026-09-23 21:19:22 +02:00

debug.go

all: mechanical lint fixes

2026-05-19 09:55:22 +02:00

grpcv1_test.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

grpcv1.go

state: preserve committed node deletion changes

2026-09-23 21:19:22 +02:00

handlers_test.go

oidc: harden reloadable confirmation flow

2026-09-23 21:19:22 +02:00

handlers.go

oidc: harden reloadable confirmation flow

2026-09-23 21:19:22 +02:00

metrics.go

metrics, policy/v2: drop unused scaffolding + nil-error returns

2026-05-19 09:55:22 +02:00

noise_test.go

noise: make deleted-node expiry clock independent

2026-09-23 21:19:22 +02:00

noise.go

noise: make deleted-node expiry clock independent

2026-09-23 21:19:22 +02:00

oidc_confirm_test.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

oidc_cookiename_test.go

oidc: avoid slice panic in getCookieName for short values

2026-06-08 10:04:49 +02:00

oidc_template_test.go

oidc: render HTML error pages for browser-facing failures

2026-04-13 17:23:47 +01:00

oidc_test.go

oidc: harden reloadable confirmation flow

2026-09-23 21:19:22 +02:00

oidc.go

oidc: harden reloadable confirmation flow

2026-09-23 21:19:22 +02:00

platform_config_test.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

platform_config.go

hscontrol: read Apple platform via chi.URLParam, not mux.Vars

2026-06-05 15:00:59 +02:00

poll_test.go

poll: interrupt blocked map writes

2026-09-23 21:19:22 +02:00

poll.go

state: mark expired nodes offline without ending the session

2026-09-23 21:19:22 +02:00

realip_test.go

hscontrol: gate proxy header trust on trusted_proxies

2026-05-18 17:17:55 +02:00

realip.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

tailsql.go

all: annotate gosec false positives with rationale

2026-05-19 09:55:22 +02:00

templates_consistency_test.go

Update links to Tailscale documentation

2026-04-18 09:33:41 +02:00