github.com/justinas/nosurf

nosurf

Package nosurf implements an HTTP handler that mitigates Cross-Site Request Forgery Attacks.

Decision Signals

Health score 81/100, confidence 100/100.

Strong

Maintenance 43

Adoption 100

Security 92

Maturity 100

Developer DX 97

Confidence 100

go get github.com/justinas/nosurf

updated Jun 11, 2026

30 symbols

Symbol	Kind	Synopsis
CSRFHandler	Type	type CSRFHandler struct{}
CSRFHandler.ExemptFunc	Method	func (h CSRFHandler) ExemptFunc(fn func(r http.Request) bool)
CSRFHandler.ExemptGlob	Method	func (h *CSRFHandler) ExemptGlob(pattern string)
CSRFHandler.ExemptGlobs	Method	func (h *CSRFHandler) ExemptGlobs(patterns ...string)
CSRFHandler.ExemptPath	Method	func (h *CSRFHandler) ExemptPath(path string)
CSRFHandler.ExemptPaths	Method	func (h *CSRFHandler) ExemptPaths(paths ...string)
CSRFHandler.ExemptRegexp	Method	func (h *CSRFHandler) ExemptRegexp(re interface{})
CSRFHandler.ExemptRegexps	Method	func (h *CSRFHandler) ExemptRegexps(res ...interface{})
CSRFHandler.IsExempt	Method	func (h CSRFHandler) IsExempt(r http.Request) bool
CSRFHandler.RegenerateToken	Method	func (h CSRFHandler) RegenerateToken(w http.ResponseWriter, r http.Request) string
CSRFHandler.ServeHTTP	Method	func (h CSRFHandler) ServeHTTP(w http.ResponseWriter, r http.Request)
CSRFHandler.SetBaseCookie	Method	func (h *CSRFHandler) SetBaseCookie(cookie http.Cookie)