One thing that always seemed pretty hard to do in Go was security. Most companies will stop at SQL Injections but I consider defense against XSS, and CSRF atta

One thing that always seemed pretty hard to do in Go was security. Most companies will stop at SQL Injections but I consider defense against XSS, and CSRF attacks just as important. And that is something Go does not excel at because I have not found any framework that makes adding these features as painless as possible. (I have only toyed with Go for the web so I might be wrong). Django (a python web-framework), on the other hand, is pretty good at these things[1] because they require little to no extra work, so that junior developers like me will get it right. That is the reason I would always go to Python for web development instead of Go, although, I like Go just as much and it is so much quicker. I'd be interested to hear how the big projects migrate these kind of attacks in Go. [1] https://docs.djangoproject.com/en/1.9/topics/security/ https://docs.djangoproject.com/en/1.9/topics/security/