httpbin

Apr 12, 2026

Changes in this version

type DefaultParams

+ JSONLCount int

+ JSONLDelay time.Duration

+ JSONLDuration time.Duration

type HTTPBin

+ func (h *HTTPBin) JSONL(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Version(w http.ResponseWriter, _ *http.Request)

type OptionFunc

+ func WithVersion(service, version, commit, buildDate, goVersion string) OptionFunc

Feb 28, 2026

Changes in this version

type HTTPBin

+ func (h *HTTPBin) RequestWithBodyDiscard(w http.ResponseWriter, r *http.Request)

Mar 20, 2025

Changes in this version

type OptionFunc

+ func WithUnsafeAllowDangerousResponses() OptionFunc

Mar 8, 2025 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Mar 8, 2025 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Mar 4, 2025 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Sep 27, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ func (h *HTTPBin) Env(w http.ResponseWriter, _ *http.Request)

type OptionFunc

+ func WithEnv(env map[string]string) OptionFunc

Sep 17, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ func (h *HTTPBin) Trailers(w http.ResponseWriter, r *http.Request)

Aug 29, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

May 12, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Feb 18, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Feb 12, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jan 13, 2024 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Dec 13, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Dec 12, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type DefaultParams

+ SSECount int

+ SSEDelay time.Duration

+ SSEDuration time.Duration

type HTTPBin

+ func (h *HTTPBin) SSE(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) WebSocketEcho(w http.ResponseWriter, r *http.Request)

type OptionFunc

+ func WithPrefix(p string) OptionFunc

Nov 5, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Oct 6, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jul 28, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type OptionFunc

+ func WithExcludeHeaders(excludeHeaders string) OptionFunc

Jul 10, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jun 26, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jun 21, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jun 18, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

May 5, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

May 2, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Mar 13, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Feb 15, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jan 31, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ func (h *HTTPBin) DumpRequest(w http.ResponseWriter, r *http.Request)

Jan 17, 2023 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Nov 16, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Nov 13, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ func (h *HTTPBin) ServeHTTP(w http.ResponseWriter, r *http.Request)

Nov 11, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ AllowedRedirectDomains map[string]struct{}

type OptionFunc

+ func WithAllowedRedirectDomains(hosts []string) OptionFunc

Nov 11, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type HTTPBin

+ func (h *HTTPBin) Anything(w http.ResponseWriter, r *http.Request)

Oct 17, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jul 5, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

+ const DefaultHostname

type HTTPBin

+ func (h *HTTPBin) Hostname(w http.ResponseWriter, r *http.Request)

type OptionFunc

+ func WithHostname(s string) OptionFunc

Apr 7, 2022 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

type Result

+ ClientIP string

+ UserAgent string

Nov 29, 2021 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jul 16, 2021 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Jul 13, 2021 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

May 10, 2021 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin

Changes in this version

+ const Base64MaxLen

+ const DefaultMaxBodySize

+ const DefaultMaxDuration

+ var DefaultDefaultParams = DefaultParams

+ type DefaultParams struct

+ DripDelay time.Duration

+ DripDuration time.Duration

+ DripNumBytes int64

+ type HTTPBin struct

+ DefaultParams DefaultParams

+ MaxBodySize int64

+ MaxDuration time.Duration

+ Observer Observer

+ func New(opts ...OptionFunc) *HTTPBin

+ func (h *HTTPBin) AbsoluteRedirect(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Base64(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) BasicAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Bearer(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Bytes(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Cache(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) CacheControl(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Cookies(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Deflate(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Delay(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) DeleteCookies(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Deny(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) DigestAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Drip(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) ETag(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) FormsPost(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Get(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Gzip(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) HTML(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Handler() http.Handler

+ func (h *HTTPBin) Headers(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) HiddenBasicAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) IP(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Image(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) ImageAccept(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Index(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) JSON(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Links(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Range(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Redirect(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) RedirectTo(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) RelativeRedirect(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) RequestWithBody(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) ResponseHeaders(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Robots(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) SetCookies(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Status(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Stream(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) StreamBytes(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) UTF8(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) UUID(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) Unstable(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) UserAgent(w http.ResponseWriter, r *http.Request)

+ func (h *HTTPBin) XML(w http.ResponseWriter, r *http.Request)

+ type Observer func(result Result)

+ func StdLogObserver(l *log.Logger) Observer

+ type OptionFunc func(*HTTPBin)

+ func WithDefaultParams(defaultParams DefaultParams) OptionFunc

+ func WithMaxBodySize(m int64) OptionFunc

+ func WithMaxDuration(d time.Duration) OptionFunc

+ func WithObserver(o Observer) OptionFunc

+ type Result struct

+ Duration time.Duration

+ Method string

+ Size int64

+ Status int

+ URI string

May 10, 2021 GO-2025-3554

  GO-2025-3554: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin