headers

Documentation

Overview

Package headers provides helpers for security-related HTTP headers.

Index

• func EmbedHTMLPageCSP(scriptNonce string) string
• func StaticHTMLPageCSP() string

Functions

func EmbedHTMLPageCSP

func EmbedHTMLPageCSP(scriptNonce string) string

EmbedHTMLPageCSP returns a strict CSP for embeddable HTML pages that require a single inline script. The provided nonce is used to allow that script without enabling unsafe-inline.

func StaticHTMLPageCSP

func StaticHTMLPageCSP() string

StaticHTMLPageCSP returns a strict CSP suitable for simple HTML pages that do not require scripts.