security

Mar 4, 2026

Changes in this version

+ const ContextCSPNonce

+ const DefaultMaxClients

type ClientRateLimiter

+ func (rl *ClientRateLimiter) Stop()

Sep 12, 2025

Changes in this version

+ func CORSMiddleware(cfg *CorsConfig) gin.HandlerFunc

+ func CSRFProtection() gin.HandlerFunc

+ func GenerateCSRFToken(c *gin.Context) string

+ func RateLimitMiddleware(r rate.Limit, b int) gin.HandlerFunc

+ func SecurityMiddleware(config *SecurityConfig) gin.HandlerFunc

+ type ClientRateLimiter struct

+ func NewClientRateLimiter(r rate.Limit, b int) *ClientRateLimiter

+ func (rl *ClientRateLimiter) GetLimiter(ip string) *rate.Limiter

+ type CorsConfig struct

+ AllowCredentials bool

+ AllowHeaders []string

+ AllowMethods []string

+ AllowOrigins []string

+ CorsEnabled bool

+ DevMode bool

+ ExposeHeaders []string

+ MaxAge int

+ Vary string

+ func NewCorsConfig() *CorsConfig

+ func (c *CorsConfig) Validate() error

+ type SecurityConfig struct

+ CSP string

+ CacheControl string

+ ContentTypeOptions string

+ EnableRateLimit bool

+ FeaturePolicy string

+ FrameOptions string

+ HSTS string

+ RateLimit int

+ ReferrerPolicy string

+ UseCSPNonce bool

+ XSSProtection string

+ func DefaultSecurityConfig() *SecurityConfig