Files
tailscale/ssh/tailssh
James Tucker 6ce8b89912 ssh/tailssh: record the raw client command in session recordings
The CastHeader recorded a shell-parsed reconstruction of the session
command, but the command is passed to the user's shell verbatim, and the
shell lexer silently drops unbalanced quotes. A spoofed command could
therefore make the recording differ from what the shell actually ran.
Record ss.RawCommand() instead.

Updates tailscale/corp#50380

Signed-off-by: James Tucker <james@tailscale.com>
2026-10-24 11:32:32 -07:00
..
2026-04-10 10:48:50 -07:00