handler

Documentation

Index

• func AddNoSniff(next http.Handler) http.Handler
• func DenyNoLHttpRequest(next http.Handler, statusCode int, msg string) http.Handler

Functions

func AddNoSniff

func AddNoSniff(next http.Handler) http.Handler

AddNoSniff returns handler to add nosniff as X-Content-Type-Options response header.

func DenyNoLHttpRequest

func DenyNoLHttpRequest(next http.Handler, statusCode int, msg string) http.Handler

DenyNoLHttpRequest terminates ServeHTTP chain to avoid CSRF. If request header does not contains X-Requested-With" header and the value is not XMLHttpRequest, HTTP session terminates.