google/go-safeweb

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1494 stars · 86 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

go-safeweb is a collection of Go libraries for building secure-by-default HTTP servers. It applies security mechanisms like XSS and CSRF protections automatically, with explicit opt-outs that are easy to review and restrict.

Use cases

• build a Go HTTP server protected against XSS by default
• prevent CSRF attacks in Go web applications
• harden an existing net/http server with security middleware
• enforce secure HTTP headers like CSP automatically
• reduce security bugs in Go web services through safe APIs
• make unsafe HTTP usage explicit and reviewable in Go code

When to choose

• you are writing a new HTTP server in Go and want security defaults applied automatically
• you want explicit, trackable opt-outs from security mechanisms
• you value high compatibility with Go's standard library net/http APIs
• you need protection against whole classes of web vulnerabilities like XSS and XSRF

When to avoid

• you need full compatibility with every net/http feature or third-party framework scenario
• you need features beyond security-critical functionality
• you want a mature, feature-complete framework rather than an early-stage project
• you need a general-purpose web framework with routing, templating, and ORM features

Facets

library · maturity active

http-server security middleware security web-development backend go windows secure-by-default xss-protection csrf-protection http-security safe-coding linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/go-safeweb")