csrf

Jan 23, 2025 GO-2025-3884

  GO-2025-3884: Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf

Changes in this version

+ const PlaintextHTTPContextKey

+ var ErrBadOrigin = errors.New("origin invalid")

+ func PlaintextHTTPRequest(r *http.Request) *http.Request

Nov 5, 2023 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Jul 29, 2021 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Apr 26, 2020 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Oct 8, 2019 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Changes in this version

type Option

+ func SameSite(s SameSiteMode) Option

+ type SameSiteMode int

+ const SameSiteDefaultMode

+ const SameSiteLaxMode

+ const SameSiteNoneMode

+ const SameSiteStrictMode

Aug 26, 2019 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Changes in this version

type Option

+ func TrustedOrigins(origins []string) Option

Jun 26, 2019 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

May 22, 2018 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Changes in this version

+ func UnsafeSkipCheck(r *http.Request) *http.Request

+ type Option func(*csrf)

Aug 26, 2015 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Changes in this version

+ func CookieName(name string) func(*csrf)

Aug 5, 2015 GO-2025-3607

  GO-2025-3607: gorilla/csrf CSRF vulnerability due to broken Referer validation in github.com/gorilla/csrf

Changes in this version

+ var ErrBadReferer = errors.New("referer invalid")

+ var ErrBadToken = errors.New("CSRF token invalid")

+ var ErrNoReferer = errors.New("referer not supplied")

+ var ErrNoToken = errors.New("CSRF token not found in request")

+ var TemplateTag = "csrfField"

+ func Domain(domain string) func(*csrf)

+ func ErrorHandler(h http.Handler) func(*csrf)

+ func FailureReason(r *http.Request) error

+ func FieldName(name string) func(*csrf)

+ func HttpOnly(h bool) func(*csrf)

+ func MaxAge(age int) func(*csrf)

+ func Path(p string) func(*csrf)

+ func Protect(authKey []byte, opts ...func(*csrf)) func(http.Handler) http.Handler

+ func RequestHeader(header string) func(*csrf)

+ func Secure(s bool) func(*csrf)

+ func TemplateField(r *http.Request) template.HTML

+ func Token(r *http.Request) string