google/go-safeweb

Issues

• Can we integrate with gorilla/mux for path parameters support?

  #310 opened 3 years ago by kele
  2

• collector plugin should pass request context

  #360 opened a year ago by ribrdb
  0

• gofmt GitHub action seems broken

  #330 opened 2 years ago by kele
  2

• Repair CI

  #354 opened 2 years ago by bsiegert
  1

• Test failure with upcoming Go 1.20 release

  #350 opened 2 years ago by ianlancetaylor
  3

• Create a XSRF plugin that blocks all state-changing requests

  #337 opened 2 years ago by empijei
  0

• Create adoption, migration and code structure documentation

  #347 opened 2 years ago by empijei
  0

• Bump language version to 1.18

  #344 opened 2 years ago by empijei
  0

• Uniform builtin plugins exemption structures to allow for allowlisting of packages.

  #336 opened 2 years ago by empijei
  0

• Add report-to and general reporting group support to the CSP plugin

  #343 opened 2 years ago by empijei
  0

• Create a keyless XSRF protection that allows for state-changing requests.

  #342 opened 2 years ago by empijei
  1

• Design and create a way to have a "safe buffer" that allows to cache responses in a safe way.

  #345 opened 2 years ago by empijei
  0

• Support streaming responses

  #260 opened 4 years ago by empijei
  0

• Create a template package with all boilerplate and all instructions needed to use the framework

  #340 opened 2 years ago by empijei
  0

• Reassess the cors plugin

  #339 opened 2 years ago by empijei
  0

• Create an integration test for the safehttp/defaults builder

  #338 opened 2 years ago by empijei
  0

• Make Bancheck support "TestOnly" or similar mechanisms.

  #335 opened 2 years ago by empijei
  0

• Muxes are not composable

  #332 opened 3 years ago by empijei
  2

• (*safehttp.Config).Mux() is not safe for concurrent use

  #331 opened 3 years ago by empijei
  0

• Update the Security Vulnerabilities and Mitigations section to link to the specific GoDoc sections that provide the features

  #327 opened 3 years ago by kele
  0

• bancheck: Add documentation to doc.go

  #294 opened 3 years ago by kele
  1

• Provide a way for the dispatcher to extract the request for the given flight

  #313 opened 3 years ago by empijei
  2

• Provide a StripPrefix utility

  #316 opened 3 years ago by empijei
  0

• Remove the Map type

  #324 opened 3 years ago by empijei
  0

• SetContext violates the context.Context contract

  #314 opened 3 years ago by empijei
  2

• Add an After stage to the interceptor flow

  #320 opened 3 years ago by kele
  0

• Provide a way to check if a ServeMuxConfig has a specific interceptor installed.

  #317 opened 3 years ago by empijei
  2

• Re-assess the one-config-per-interceptor hard limit

  #318 opened 3 years ago by empijei
  2

• Reserve characters for path parameters

  #308 opened 3 years ago by empijei
  1

• Support Interceptor Wrapping

  #307 opened 3 years ago by empijei
  1

• xsrfhtml: Support key rotation

  #306 opened 3 years ago by empijei
  0

• Why is Handle signature taking (path, method, handler) instead of (method, path, handler)?

  #315 opened 3 years ago by empijei
  1

• Provide a "ServeTemplates" helper

  #311 opened 3 years ago by empijei
  0

• Make sure that no two given configs apply to the same interceptor

  #302 opened 3 years ago by empijei
  0

• reportingapi: Add an option to serialize it as a structured header.

  #305 opened 4 years ago by empijei
  0

• Implement a ReportTo plugin

  #299 opened 3 years ago by empijei
  0

• Move away from "ban" in favor of "restrict" in the language

  #303 opened 4 years ago by kele
  0

• fetchmetadata: switch to configs for exceptions

  #300 opened 4 years ago by empijei
  0

• bancheck: Does it work for methods of concrete types?

  #295 opened 4 years ago by kele
  5

• bancheck: Provide configurations

  #297 opened 4 years ago by empijei
  0

• bancheck: Add tests for aliasing

  #293 opened 4 years ago by kele
  0

• Allow JS in static HTML files

  #291 opened 4 years ago by empijei
  0

• Create a contributors guide

  #292 opened 4 years ago by kele
  0

• A linter for disallowing imports and function calls

  #270 opened 4 years ago by kele
  0

• Rename "Dispatcher"

  #280 opened 4 years ago by empijei
  1

• Make multipart forms resilient to path traversal attacks

  #264 opened 4 years ago by kele
  0

• Hide the Dispatcher from ServeMuxConfig

  #269 opened 4 years ago by empijei
  0

• The defaults package should offer more configuration options

  #268 opened 4 years ago by kele
  0

• Add a way to use the defaults package with Angular

  #266 opened 4 years ago by empijei
  0

• Add static hashes support to the csp plugin

  #261 opened 4 years ago by kele
  1