secure

Documentation

Overview

Package secure adds headers to protect against xss and reflection attacks and force use of https

Index

• Variables
• func HSTSMiddleware(h http.HandlerFunc) http.HandlerFunc
• func Middleware(h http.HandlerFunc) http.HandlerFunc

Variables

var ContentSecurityPolicy = "" /* 221-byte string literal not displayed */

ContentSecurityPolicy defaults to a strict policy disallowing iframes and scripts from any other origin save self (and Google Analytics for scripts)

Functions

func HSTSMiddleware

func HSTSMiddleware(h http.HandlerFunc) http.HandlerFunc

HSTSMiddleware adds only the Strict-Transport-Security with a duration of 2 years

func Middleware

func Middleware(h http.HandlerFunc) http.HandlerFunc

Middleware adds some headers suitable for secure sites