Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

nosurf

package module

Go to main page

Versions in this module

v1

v1.1.1

Aug 30, 2020

v1.1.0

Nov 5, 2019 GO-2020-0049

GO-2020-0049: Improper input validation in github.com/justinas/nosurf

v1.0.0

Nov 5, 2019 GO-2020-0049

GO-2020-0049: Improper input validation in github.com/justinas/nosurf

Changes in this version

+ const CookieName

+ const FailureCode

+ const FormFieldName

+ const HeaderName

+ const MaxAge

+ var ErrBadReferer = errors.New(...)

+ var ErrBadToken = errors.New(...)

+ var ErrNoReferer = errors.New("A secure request contained no Referer or its value was malformed")

+ func NewPure(handler http.Handler) http.Handler

+ func Reason(req *http.Request) error

+ func Token(req *http.Request) string

+ func VerifyToken(realToken, sentToken string) bool

+ type CSRFHandler struct

+ func New(handler http.Handler) *CSRFHandler

+ func (h *CSRFHandler) ExemptFunc(fn func(r *http.Request) bool)

+ func (h *CSRFHandler) ExemptGlob(pattern string)

+ func (h *CSRFHandler) ExemptGlobs(patterns ...string)

+ func (h *CSRFHandler) ExemptPath(path string)

+ func (h *CSRFHandler) ExemptPaths(paths ...string)

+ func (h *CSRFHandler) ExemptRegexp(re interface{})

+ func (h *CSRFHandler) ExemptRegexps(res ...interface{})

+ func (h *CSRFHandler) IsExempt(r *http.Request) bool

+ func (h *CSRFHandler) RegenerateToken(w http.ResponseWriter, r *http.Request) string

+ func (h *CSRFHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ func (h *CSRFHandler) SetBaseCookie(cookie http.Cookie)

+ func (h *CSRFHandler) SetFailureHandler(handler http.Handler)