gorilla/csrf

Health v2 · maintenance only

Adoption not part of the score

1209 stars · 174 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

gorilla/csrf is a Go HTTP middleware library that provides cross-site request forgery (CSRF) protection for web applications and services. It works with any framework built on Go's http.Handler interface, including net/http, Gorilla, Gin, and Echo.

Use cases

• protect go web forms from csrf attacks
• add csrf tokens to html forms in go
• secure json apis against cross-site request forgery
• add csrf middleware to gin or echo app
• generate hidden csrf input field in html/template
• prevent xsrf attacks in go http service

When to choose

• you need battle-tested CSRF protection for a Go web app or API
• you use net/http or any http.Handler-compatible router and want drop-in middleware
• you want template helpers for embedding CSRF tokens in HTML forms

When to avoid

• you are not writing a Go web application
• you need protection against other attack classes like XSS or SQL injection
• you want a full security suite rather than a single-purpose CSRF library

Facets

library · maturity stable

middleware security http-server web-development backend security go csrf csrf-protection xsrf gorilla-web-toolkit http-middleware web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gorilla/csrf")