3 ms·
> A fix is unlikely—I raised an issue on this over a year ago and my recommendations were rebutted: https://github.com/astaxie/build-web-application-with-golang
by BinaryIdiot 11y ago
> A fix is unlikely—I raised an issue on this over a year ago and my recommendations were rebutted: https://github.com/astaxie/build-web-application-with-golang.. https://github.com/astaxie/build-web-application-with-golang....
That is incredibly unfortunate especially since much of the guide seems pretty decent.
- elithrar 11y agoI disagree—the guide is Beego centric, and Beego does some peculiar things[1]. I feel like I'm ragging on someone's hard work here, but I take web security seriously, and I want to make sure frameworks (which are attractive to newbies) are doing sane things. [1]: https://github.com/astaxie/beego/issues/620 https://github.com/astaxie/beego/issues/620
- Vendan 11y agoAs a cyber security professional, that was an extremely disturbing read.
- deleted 11y ago[deleted]
- thewhitetulip 11y agomeanwhile I started to write my own little book on webapps with Go: https://github.com/thewhitetulip/web-dev-golang-anti-textbook https://github.com/thewhitetulip/web-dev-golang-anti-textboo...
- 0x434D53 11y agoWhich also teaches horrible security practices. Pleas also use gorilla/csrf and not your own brown "solution".
- thewhitetulip 11y agookay, you could be less insulting though
- tyre 11y agoReally impressed by your patience and the thoroughness of your answers. Although the outcome is disappointing, you did an excellent job communicating not only what should change, but why and with references.