mirror
/
go
mirror of https://github.com/golang/go.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
go/doc/next/6-stdlib/99-minor/net/http/73626.md

496 B
Raw Blame History

The new [CrossOriginProtection] implements protections against Cross-Site Request Forgery (CSRF) by rejecting non-safe cross-origin browser requests. It uses modern browser Fetch metadata, doesn't require tokens or cookies, and supports origin-based and pattern-based bypasses.