This repository has been archived by the owner on May 24, 2022. It is now read-only.

Add CSRF protection to all forms #24

Open

MFAshby opened this issue Nov 19, 2019 · 1 comment

Labels

bug good first issue

Owner

MFAshby commented Nov 19, 2019

Go http server doesn't add CSRF protection by default. We should probably add this.

A reasonably simple implementation is described here: https://golangexample.com/csrf-protection-middleware-for-go/

MFAshby added bug good first issue labels

Owner Author

MFAshby commented Feb 15, 2020

Or gorilla do a drop-in middleware: https://github.com/gorilla/csrf

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.