nosurf

Nov 3, 2021

Changes in this version

type CSRFHandler

+ func (h *CSRFHandler) DisableGlob(pattern string)

+ func (h *CSRFHandler) DisableGlobs(patterns ...string)

+ func (h *CSRFHandler) DisablePath(path string)

+ func (h *CSRFHandler) IsDisabled(r *http.Request) bool

+ type Handler interface

+ DisableGlob func(string)

+ DisableGlobs func(...string)

+ DisablePath func(string)

+ ExemptPath func(string)

+ IgnoreGlob func(string)

+ IgnoreGlobs func(...string)

+ IgnorePath func(string)

+ RegenerateToken func(w http.ResponseWriter, r *http.Request) string

Jun 30, 2021

Changes in this version

type CSRFHandler

+ func (h *CSRFHandler) IgnoreGlob(pattern string)

+ func (h *CSRFHandler) IgnoreGlobs(patterns ...string)

Feb 8, 2021

Changes in this version

type CSRFHandler

+ func (h *CSRFHandler) SetBaseCookieFunc(f func(w http.ResponseWriter, r *http.Request) http.Cookie)

Oct 22, 2020

Changes in this version

type CSRFHandler

+ func (h *CSRFHandler) IgnorePath(path string)

+ func (h *CSRFHandler) IsIgnored(r *http.Request) bool

Oct 22, 2020

Changes in this version

type CSRFHandler

+ func (h *CSRFHandler) DisableForPath(path string)

Nov 5, 2019

Changes in this version

+ const CookieName

+ const FailureCode

+ const FormFieldName

+ const HeaderName

+ const MaxAge

+ var ErrBadReferer = errors.New(...)

+ var ErrBadToken = errors.New(...)

+ var ErrNoReferer = errors.New("A secure request contained no Referer or its value was malformed")

+ func NewPure(handler http.Handler) http.Handler

+ func Reason(req *http.Request) error

+ func Token(req *http.Request) string

+ func VerifyToken(realToken, sentToken string) bool

+ type CSRFHandler struct

+ func New(handler http.Handler) *CSRFHandler

+ func (h *CSRFHandler) ExemptFunc(fn func(r *http.Request) bool)

+ func (h *CSRFHandler) ExemptGlob(pattern string)

+ func (h *CSRFHandler) ExemptGlobs(patterns ...string)

+ func (h *CSRFHandler) ExemptPath(path string)

+ func (h *CSRFHandler) ExemptPaths(paths ...string)

+ func (h *CSRFHandler) ExemptRegexp(re interface{})

+ func (h *CSRFHandler) ExemptRegexps(res ...interface{})

+ func (h *CSRFHandler) IsExempt(r *http.Request) bool

+ func (h *CSRFHandler) RegenerateToken(w http.ResponseWriter, r *http.Request) string

+ func (h *CSRFHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ func (h *CSRFHandler) SetBaseCookie(cookie http.Cookie)

+ func (h *CSRFHandler) SetFailureHandler(handler http.Handler)