CORS provides Cross-Origin Resource Sharing middleware. Example: import ( "net/http" "github.com/gorilla/handlers" "github.com/goril

CanonicalHost is HTTP middleware that re-directs requests to the canonical domain. It accepts a domain and a status code (e.g. 301 or 302) and re-dire

CompressHandler gzip compresses HTTP responses for clients that support it via the 'Accept-Encoding' header. Compressing TLS traffic may leak the pag

A typical request with an OK response.

AllowedOrigins sets the allowed origins for CORS requests, as used in the 'Allow-Access-Control-Origin' HTTP header. Note: Passing in a []string{"*"}

RecoveryHandler is HTTP middleware that recovers from a panic, logs the panic, writes http.StatusInternalServerError, and continues to the next handle

AllowedMethods can be used to explicitly allow methods in the Access-Control-Allow-Methods header. This is a replacement operation so you must also pa

AllowedOriginValidator sets a function for evaluating allowed origins in CORS requests, represented by the 'Allow-Access-Control-Origin' HTTP header.

LoggingHandler return a http.Handler that wraps h and logs requests to out in Apache Common Log Format (CLF). See http://httpd.apache.org/docs/2.2/lo

PrintRecoveryStack is a functional option to enable or disable printing stack traces on panic.

RecoveryLogger is a functional option to override the default logger.

buildCommonLogLine builds a log entry for req in Apache Common Log Format. ts is the timestamp with which the entry should be logged. status and size

cleanHost cleans invalid Host headers by stripping anything after '/' or ' '. This is backported from Go 1.5 (in response to issue #11206) and attempt

getIP retrieves the IP from the X-Forwarded-For, X-Real-IP and RFC7239 Forwarded headers (in that order).

getScheme retrieves the scheme from the X-Forwarded-Proto and RFC7239 Forwarded headers (in that order).

AllowCredentials can be used to specify that the user agent may pass authentication details along with the request.

Functional options for configuring CORS. AllowedHeaders adds the provided headers to the list of allowed headers in a CORS request. This is an appen

CompressHandlerLevel gzip compresses HTTP responses with specified compression level for clients that support it via the 'Accept-Encoding' header. Th

ContentTypeHandler wraps and returns a http.Handler, validating the request content type is compatible with the contentTypes list. It writes a HTTP 41

ExposedHeaders can be used to specify headers that are available and will not be stripped out by the user-agent.

HTTPMethodOverrideHandler wraps and returns a http.Handler which checks for the X-HTTP-Method-Override header or the _method form key, and overrides (

IgnoreOptions causes the CORS middleware to ignore OPTIONS requests, instead passing them through to the next handler. This is useful when your applic

MaxAge determines the maximum age (in seconds) between preflight requests. A maximum of 10 minutes is allowed. An age above this value will default to

OptionStatusCode sets a custom status code on the OPTIONS requests. Default behaviour sets it to 200 to reflect best practices. This is option is not

ProxyHeaders inspects common reverse proxy headers and sets the corresponding fields in the HTTP request struct. These are X-Forwarded-For and X-Real-

CONNECT request over http/2.0.

isContentType validates the Content-Type header matches the supplied contentType. That is, its type and subtype match.

writeLog writes a log entry for req to w in Apache Common Log Format. ts is the timestamp with which the entry should be logged. status and size are u

CombinedLoggingHandler return a http.Handler that wraps h and logs requests to out in Apache Combined Log Format. See http://httpd.apache.org/docs/2.

CustomLoggingHandler provides a way to supply a custom log formatter while taking advantage of the mechanisms in this package.

Flush implements the http.Flusher interface.

Header/Write/WriteHeader implement the http.ResponseWriter interface.

Hijack implements the http.Hijacker interface.

Make sure we can compress and serve an *os.File properly. We need to use a real http server to trigger the net/http sendfile special case.