gowebguard

Introducing GoWebGuard

Your Webapp defender

This package is very helpful for you if you want to secure your web application.

To use this package , follow given instructions.

Use this command to get started :-

    go get github.com/Parasdeveloper8/gowebguard/v2@v2.0.2

After installing ,use like this :-

    r := gin.Default()
    r.Use(webguard.WebGuard())

It's CSP middleware

   r.Use(webguard.CSP())
  //This will add value to CSP header.

Now everything will work fine but if you wanna customize configurations,create a instance of webguard.Headers like this

   r := gin.Default()
   headers := &webguard.Headers{
		StrictTransportSecurity: "your value",
		XContentTypeOptions:     "your value",
		XFrameOptions:           "your value",
		XXSSProtection:          "your value",
		ReferrerPolicy:          "your value",
	}
 cheader := &webguard.Csp{
		ContentSecurityPolicy: "your value",
	}//you can add your value to CSP header like this

 r.Use(webguard.WebGuard(headers))
 r.Use(webguard.CSP(cheader))

If you are using tools like bootstrap , do this -

  //csp struct
	header := webguard.Csp{ContentSecurityPolicy: "style-src:'self' bootstrap.web.link"}
        r.Use(webguard.CSP(&header))

• You can load scripts from other resources also just update header.

    //default csp header value
    csp:= "default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline';
    img-src 'self'; connect-src 'self'; font-src 'self'; frame-src 'none';"
    // These values will block all external resources like jquery,bootstrap,etc.

This package secures web application by setting headers like ContentSecurityPolicy,StrictTransportSecurity,XContentTypeOptions,XFrameOptions.

If you like ❤ this star this repo ✨

This package will be improved continuously.

Creator := paras prajapat