I disagree—the guide is Beego centric, and Beego does some peculiar things[1]. I feel like I'm ragging on someone's hard work here, but I take web security seriously, and I want to make sure frameworks (which are attractive to newbies) are doing sane things.
Really impressed by your patience and the thoroughness of your answers. Although the outcome is disappointing, you did an excellent job communicating not only what should change, but why and with references.
As a cyber security professional, that was an extremely disturbing read.
Re:Building Web Apps in Go
by thewhitetulip on Monday March 28, 2016 @12:48AM
(#11372783)
meanwhile I started to write my own little book on webapps with Go: https://github.com/thewhitetulip/web-dev-golang-anti-textboo...
Which also teaches horrible security practices. Pleas also use gorilla/csrf and not your own brown "solution".
Re:Building Web Apps in Go
by thewhitetulip on Wednesday March 30, 2016 @01:57AM
(#11387236)
okay, you could be less insulting though
That is incredibly unfortunate especially since much of the guide seems pretty decent.