Hacker News new | ask | show | jobs
by mayhew 3765 days ago
nosurf [1] is a pretty popular CSRF protection package for Go. You need to realize that Go's built in "web framework" is extremely minimal unlike Django. It's more comparable to something like Flask, which also doesn't have CSRF protection built-in.

[1] https://github.com/justinas/nosurf