gincsp

Documentation

Overview

Package gincsp is a gin middleware that supports Content Security Policy

Index

• func ContentSecurityPolicy(pol *cspbuilder.Policy, reportOnly bool) gin.HandlerFunc
• func Directive(c *gin.Context, ds string) *cspbuilder.Directive
• func Hash(c *gin.Context, ds string, ht cspbuilder.HashType, source string)
• func Nonce(c *gin.Context) string
• func NonceHTMLAttr(c *gin.Context) template.HTMLAttr

Functions

func ContentSecurityPolicy

func ContentSecurityPolicy(pol *cspbuilder.Policy, reportOnly bool) gin.HandlerFunc

ContentSecurityPolicy implements the gin.HandlerFunc. Does not support dynamically calculated hashes reportOnly sets Content-Security-Policy-Report-Only header

func Directive

func Directive(c *gin.Context, ds string) *cspbuilder.Directive

func Hash

func Hash(c *gin.Context, ds string, ht cspbuilder.HashType, source string)

func Nonce

func Nonce(c *gin.Context) string

func NonceHTMLAttr

func NonceHTMLAttr(c *gin.Context) template.HTMLAttr

NonceHTMLAttr returns unescaped `nonce="<nonce>"` string for use in template.