Versions in this module Expand all Collapse all v0 v0.1.1 Apr 12, 2026 v0.1.0 Apr 12, 2026 Changes in this version + const DbField + const ENV_SESSION_EXPIRE_DAYS + const ENV_SESSION_FIELD + const ENV_SESSION_SECRET + func ApplySecurityMiddleware(r *gin.RouterGroup) + func CSRFMiddleware(config *SecurityConfig) gin.HandlerFunc + func CorsMiddleware() gin.HandlerFunc + func GetCarrotSessionField() string + func InjectDB(db *gorm.DB) gin.HandlerFunc + func InputValidationMiddleware() gin.HandlerFunc + func LoggerMiddleware(logger *zap.Logger) gin.HandlerFunc + func SanitizeString(input string) string + func SecureCompare(a, b string) bool + func SecurityMiddleware(config *SecurityConfig) gin.HandlerFunc + func SecurityMiddlewareChain() []gin.HandlerFunc + func SignVerifyMiddleware() gin.HandlerFunc + func ValidateEmail(email string) bool + func ValidatePassword(password string) error + func WithCookieSession(secret string, maxAge int) gin.HandlerFunc + func WithMemSession(secret string) gin.HandlerFunc + func XSSProtectionMiddleware() gin.HandlerFunc + type SecurityConfig struct + AllowedOrigins []string + CSRFHttpOnly bool + CSRFMaxAge time.Duration + CSRFSameSite csrf.SameSiteMode + CSRFSecret string + CSRFSecure bool + CSRFTokenName string + ContentTypeNosniff bool + HSTSMaxAge int + MaxRequestSize int64 + ReferrerPolicy string + XFrameOptions string + XSSProtection bool + func DefaultSecurityConfig() *SecurityConfig