net/http: CrossOriginProtection could benefit from an example

[brackendawson]

Go version

1.25rc1

Output of go env in your module/workspace:

AR='ar'
CC='clang'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='clang++'
GCCGO='gccgo'
GO111MODULE=''
GOARCH='arm64'
GOARM64='v8.0'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/Users/brackendawson/Library/Caches/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/Users/brackendawson/Library/Application Support/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -arch arm64 -pthread -fno-caret-diagnostics -Qunused-arguments -fmessage-length=0 -ffile-prefix-map=/var/folders/8c/f9y61rb14cn8c6_6lnz10q300000gn/T/go-build980947712=/tmp/go-build -gno-record-gcc-switches -fno-common'
GOHOSTARCH='arm64'
GOHOSTOS='darwin'
GOINSECURE=''
GOMOD='/dev/null'
GOMODCACHE='/Users/brackendawson/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='darwin'
GOPATH='/Users/brackendawson'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/Users/brackendawson/sdk/go1.25rc1'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/Users/brackendawson/Library/Application Support/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/Users/brackendawson/sdk/go1.25rc1/pkg/tool/darwin_arm64'
GOVCS=''
GOVERSION='go1.25rc1'
GOWORK=''
PKG_CONFIG='pkg-config'

What did you do?

I tried using the new CrossOriginProtection in the net/http package, having read the doc for NewCrossOriginProtection and CrossOriginProtection it wasn't clear to me how to use it. Only when I found the CrossOriginProtection.Handler method did it click. I think a basic example would alleviate this paper cut.

What did you see happen?

I found it slightly difficult to understand how to use CrossOriginProtection.

What did you expect to see?

An example of how to use CrossOriginProtection.

[gopherbot]

Change https://go.dev/cl/681256 mentions this issue: net/http: Add example for CrossOriginProtection

[gabyhelp]

Related Code Changes

• net/http: Add example for CrossOriginProtection

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}