crewjam / csp

go library for generating Content-Security-Policy headers

csp

Package csp provides structures to add Content-Security-Policy headers to HTTP responses.

import (
	"net/http"

	"github.com/crewjam/csp"
)

func HeaderExample(w http.ResponseWriter, r *http.Request) {
	r.Header.Add("Content-Security-Policy", csp.Header{
		DefaultSrc: []string{"'self'", "static.example.com"},
	}.String())
}