httpserver

Overview ¶

Package httpserver owns CandaceOS Core's single configured Gin engine.

The package exists so that every Core process serves from one router with one security posture. Callers may rely on NewEngine returning a caller-owned engine that applies the restrictive Content-Security-Policy and the accompanying hardening headers to every response, that disables trailing-slash and fixed-path redirects, and that reports an unsupported method rather than falling through to a not-found. Components mount routes onto that engine through gin.IRouter and never build an engine, a standard-library mux, or a catch-all proxy of their own.