4 ms·
I disagree—the guide is Beego centric, and Beego does some peculiar things[1]. I feel like I'm ragging on someone's hard work here, but I take web security seri
by elithrar 11y ago
I disagree—the guide is Beego centric, and Beego does some peculiar things[1]. I feel like I'm ragging on someone's hard work here, but I take web security seriously, and I want to make sure frameworks (which are attractive to newbies) are doing sane things.
[1]: https://github.com/astaxie/beego/issues/620 https://github.com/astaxie/beego/issues/620
- Vendan 11y agoAs a cyber security professional, that was an extremely disturbing read.
- deleted 11y ago[deleted]
- thewhitetulip 11y agomeanwhile I started to write my own little book on webapps with Go: https://github.com/thewhitetulip/web-dev-golang-anti-textbook https://github.com/thewhitetulip/web-dev-golang-anti-textboo...
- 0x434D53 11y agoWhich also teaches horrible security practices. Pleas also use gorilla/csrf and not your own brown "solution".
- thewhitetulip 11y agookay, you could be less insulting though
- tyre 11y agoReally impressed by your patience and the thoroughness of your answers. Although the outcome is disappointing, you did an excellent job communicating not only what should change, but why and with references.