nosurf
A CSRF protection middleware for Go that prevents Cross-Site Request Forgery attacks in any HTTP application.
What is nosurf?
nosurf is an HTTP middleware package for Go that prevents Cross-Site Request Forgery (CSRF) attacks. It wraps any http.Handler to automatically validate CSRF tokens on non-safe HTTP methods, addressing a common security vulnerability in Go's micro-framework ecosystem.
Go developers building web applications or services with any HTTP handler or framework that lacks built-in CSRF protection, particularly those using lightweight or custom setups.
Developers choose nosurf for its minimal, dependency-free design that integrates seamlessly with any Go HTTP application, offering flexible exemption rules, BREACH attack mitigation, and manual token verification for non-standard use cases.
Overview
CSRF protection middleware for Go.
Use Cases
Best For
- Adding CSRF protection to Go applications using lightweight frameworks or custom http.Handlers without built-in security.
- Securing form submissions in Go web applications where automatic token validation on POST requests is needed.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.