helmet

KO | EN

gitlite — search

#python #react #go #golang #rust #docker #nodejs #cli #vue #awesome-list #pytorch #security #openai #open-source

(★ 35)

HTTP security middleware for Go(lang) inspired by HelmetJS.

helmet 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Helmet

[![Go Report Card](https://goreportcard.com/badge/goddtriffin/helmet)](https://goreportcard.com/report/goddtriffin/helmet)

HTTP security headers middleware for [Go(lang)](https://golang.org/) inspired by [HelmetJS](https://helmetjs.github.io/).

Helmet helps you secure your Golang web applications by setting various HTTP security headers. It's not a silver bullet, but it can help!

**Project is under active maintenance - even if there are no recent commits! Please submit an issue / bug request if you the library needs updating for any reason!**

## Quick Start

You can see more in the [documentation](https://pkg.go.dev/github.com/goddtriffin/helmet).

`go get github.com/goddtriffin/helmet`

```go
package main

import (
	"fmt"
	"log"
	"net/http"

"github.com/goddtriffin/helmet"
)

func main() {
	handler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		fmt.Fprintln(w, "I love HelmetJS, I just wish there was a Go(lang) equivalent...")
	})

helmet := helmet.Default()
	http.Handle("/", helmet.Secure(handler))

log.Fatal(http.ListenAndServe(":8080", nil))
}
```

This code sample can be found in [`/examples/01-quick-start/`](https://github.com/goddtriffin/helmet/blob/master/examples/01-quick-start/main.go).

## How It Works

Helmet is a collection of 12 smaller middleware functions that set HTTP security response headers. Initializing via `helmet.Default()` will not include all of these middleware functions by default.

| Module                                                                                                           | Default                                        |
| ---------------------------------------------------------------------------------------------------------------- | ---------------------------------------------- |
| [Content-Security-Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)                                 |                                                |
| [X-Content-Type-Options](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options)       | `nosniff`                                      |
| [X-DNS-Prefetch-Control](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-DNS-Prefetch-Control)       | `off`                                          |
| [X-Download-Options](https://helmetjs.github.io/docs/ienoopen/)                                                  | `noopen`                                       |
| [Expect-CT](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT)                                 |                                                |
| [Feature-Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy)                       |                                                |
| [X-Frame-Options](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)                     | `SAMEORIGIN`                                   |
| [X-Permitted-Cross-Domain-Policies](https://helmetjs.github.io/docs/crossdomain/)                                |                                                |
| [X-Powered-By](https://helmetjs.github.io/docs/hide-powered-by/)                                                 | Removes the `X-Powered-By` header              |
| [Referrer-Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy)                     |                                                |
| [Strict-Transport-Security](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) | `max-age=5184000; includeSubDomains` (60 days) |
| [X-XSS-Protection](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection)                   | `1; mode=block`                                |

## Credits

Made with 🤬 and 🥲 by [Todd Everett Griffin](https://www.toddgriffin.me/)

Helmet is open source under the [MIT License](https://github.com/goddtriffin/helmet/blob/master/LICENSE).

Gopher image by [Renee French](https://reneefrench.blogspot.com/), licensed under [CC 3.0 license](https://creativecommons.org/licenses/by/3.0/).

Helmet icon by [Hand-Drawn Goods](https://www.iconfinder.com/handdrawngoods), licensed under [CC 3.0 license](https://creativecommons.org/licenses/by/3.0/).

Gopher + Helmet remix by [Emily Wilson](https://emilywilsondesign.myportfolio.com/), licensed under [CC 3.0 license](https://creativecommons.org/licenses/by/3.0/).

helmet

helmet 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

helmet

helmet 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README