httpserver

Overview ¶

Package httpserver owns deploy's single configured Gin engine.

The package exists so that every Core process serves from one router with one security posture. Callers may rely on NewEngine returning a caller-owned engine that applies the restrictive Content-Security-Policy and the accompanying hardening headers to every response, that disables trailing-slash and fixed-path redirects, and that reports an unsupported method rather than falling through to a not-found. Components mount routes onto that engine through gin.IRouter and never build an engine, a standard-library mux, or a catch-all proxy of their own.