Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
var BrowserNoiseHeaders = []string{
headerSecChUA, headerSecChUA + "-mobile", headerSecChUA + "-platform",
"sec-fetch-dest", "sec-fetch-mode", "sec-fetch-site",
"sentry-trace", "baggage",
"priority",
}
BrowserNoiseHeaders are headers added by browsers, not needed for API calls.
var OptionalHeaders = []string{
"user-agent",
"referer",
"origin",
"accept-language",
"accept-encoding",
}
OptionalHeaders are browser-specific headers that are usually not needed for API calls.
var SecretCookiePatterns = []string{
"session", "sess", "sid", "token",
"auth", "csrf", "xsrf", "jwt",
"login", "password", "key", "secret",
}
SecretCookiePatterns are substrings that indicate a secret cookie name.
var SecretHeaderPrefixes = []string{
"authorization",
"proxy-authorization",
"x-api-key", "api-key",
"x-auth",
"x-access-token",
"cookie",
"x-csrf-token", "x-xsrf-token",
}
SecretHeaderPrefixes are case-insensitive prefixes for secret headers.
Functions ¶
func IsBrowserNoise ¶
IsBrowserNoise returns true if name matches BrowserNoiseHeaders (case-insensitive prefix).
func IsOptionalHeader ¶
IsOptionalHeader returns true if name matches OptionalHeaders (case-insensitive).
func IsSecretCookie ¶
IsSecretCookie returns true if cookie name matches SecretCookiePatterns or value looks like a token.
func IsSecretHeader ¶
IsSecretHeader returns true if name matches any SecretHeaderPrefixes (case-insensitive prefix).