signer

package

v0.0.0-...-57974ef Latest Latest Go to latest Published: Aug 8, 2022 License: Apache-2.0 Imports: 27 Imported by: 6

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/ampproject/amppackager

Documentation ¶

Overview ¶

Auxiliary functions for use by Signer.

Index ¶

func GetJoined(h http.Header, name string) string
func MutateFetchedContentSecurityPolicy(fetched string) string
type SXGParams
type Signer
- func New(certHandler certcache.CertHandler, key crypto.PrivateKey, ...) (*Signer, error)
- func (this *Signer) ServeHTTP(resp http.ResponseWriter, req *http.Request)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GetJoined ¶

func GetJoined(h http.Header, name string) string

Gets all values of the named header, joined on comma.

func MutateFetchedContentSecurityPolicy ¶

func MutateFetchedContentSecurityPolicy(fetched string) string

Some Content-Security-Policy (CSP) configurations have the ability to break AMPHTML document functionality on the AMPHTML Cache if set on the document. This method parses the publisher's provided CSP and mutates it to ensure that the document is not broken on the AMP Cache.

Specifically, the following CSP directives are passed through unmodified:

base-uri
block-all-mixed-content
font-src
form-action
manifest-src
referrer
upgrade-insecure-requests

And the following CSP directives are overridden to specific values:

object-src
report-uri
script-src
style-src
default-src

All other CSP directives (see https://w3c.github.io/webappsec-csp/) are stripped from the publisher provided CSP.

Types ¶

type SXGParams ¶

type SXGParams struct {
	// contains filtered or unexported fields
}

type Signer ¶

type Signer struct {
	// contains filtered or unexported fields
}

func New ¶

func New(certHandler certcache.CertHandler, key crypto.PrivateKey, urlSets []util.URLSet,
	rtvCache *rtv.RTVCache, shouldPackage func() error, overrideBaseURL *url.URL,
	requireHeaders bool, forwardedRequestHeaders []string, timeNow func() time.Time) (*Signer, error)

func (*Signer) ServeHTTP ¶

func (this *Signer) ServeHTTP(resp http.ResponseWriter, req *http.Request)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL