fetchmetadata

package

v0.0.0-...-f115076 Latest Latest Go to latest Published: Apr 20, 2024 License: Apache-2.0 Imports: 4 Imported by: 2

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package fetchmetadata provides Fetch-Metadata based protections.

This section is empty.

This section is empty.

This section is empty.

type Policy struct {
	ReportOnly bool
	// contains filtered or unexported fields
}

Policy is a security policy based on Fetch Metadata.

func FramingIsolationPolicy() *Policy

FramingIsolationPolicy protects from framing attacks.

func ResourceIsolationPolicy() *Policy

ResourceIsolationPolicy protects resources.

func (p *Policy) Before(w safehttp.ResponseWriter, r *safehttp.IncomingRequest, cfg safehttp.InterceptorConfig) safehttp.Result

Before implements the Fetch Metadata validation and signals logic.

func (p *Policy) Commit(w safehttp.ResponseHeadersWriter, r *safehttp.IncomingRequest, resp safehttp.Response, _ safehttp.InterceptorConfig)

Commit is a no-op, required to satisfy the safehttp.Interceptor interface.

func (p *Policy) Match(cfg safehttp.InterceptorConfig) bool

Match recongnizes configs to disable fetch metadata protection.

Path	Synopsis
internalunsafefetchmetadata Package internalunsafefetchmetadata is used internally to override FM policies.	Package internalunsafefetchmetadata is used internally to override FM policies.
unsafefetchmetadatafortests Package unsafefetchmetadatafortests can be used to disable Fetch Metadata protections on specific handler registration in tests.	Package unsafefetchmetadatafortests can be used to disable Fetch Metadata protections on specific handler registration in tests.
unsaferesourcepolicy Package unsaferesourcepolicy can be used to disable Fetch Metadata protections on specific handler registration.	Package unsaferesourcepolicy can be used to disable Fetch Metadata protections on specific handler registration.