This library aims to be a quality of life improvement when dealing with setting Content Security Policy headers in the Go programming language.

For a quick demo, import cspheader and output a default configuration:

... headerMap, _ := cspheaders.SecurityOptionsReactJS().Load() fmt.Println(headerMap) ... /* // don't mind the formatting, please: map[ Content-Security-Policy: script-src 'self' 'strict-dynamic'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; report-to default; default-src 'none'; style-src-attr 'self' 'unsafe-inline'; Report-To:{"group":"default","max_age": 86400, "endpoints": [{"url":"/_/csp-reports" }]} ] */ 

From there, you can simply provide the key/value mappings to http.ResponseWriter's Header().Set()'s functionality.

Pull requests or GitHub issues are welcomed.

If you are creating a pull request, please include tests as well as a description of the problem being solved.

If you are opening a GitHub issue, please include any error messages steps to reproduce the issue you encountered.