ee7e5ab6a8
例如：访问”/login“页面，有个表单，此时会产生一个_xsrf cookie，Path为”/“，此时手动删除_xsrf cookie，Post提交到“/test/post”，会报错expected XSRF not found；后退到”/login“页面，会产生一个Path为”/login“的_xsrf cookie，然后访问"/"根页面，再回到"/login"页面，这时会产生两个_xsrf cookie，Path分别为"/"和”/login"，再向"/test/post"页面提交，后端就可能读到错误的_xsrf cookie造成XSRF验证失败。 在XSRFToken函数中，将SetSecureCookie函数中的Path参数固定为"/"，可以解决这个问题
Beego 
Beego is used for rapid development of enterprise application in Go, including RESTful APIs, web apps and backend services.
It is inspired by Tornado, Sinatra and Flask. beego has some Go-specific features such as interfaces and struct embedding.
Beego is composed of four parts:
- Base modules: including log module, config module, governor module;
- Task: is used for running timed tasks or periodic tasks;
- Client: including ORM module, httplib module, cache module;
- Server: including web module. We will support gRPC in the future;
Please use RELEASE version, or master branch which contains the latest bug fix
Quick Start
If you could not open official website, go to beedoc
Web Application
Create hello directory, cd hello directory
mkdir hello
cd hello
Init module
go mod init
Download and install
go get github.com/beego/beego/v2@latest
Create file hello.go
package main
import "github.com/beego/beego/v2/server/web"
func main() {
web.Run()
}
Build and run
go build hello.go
./hello
Go to http://localhost:8080
Congratulations! You've just built your first beego app.
Features
- RESTful support
- MVC architecture
- Modularity
- Auto API documents
- Annotation router
- Namespace
- Powerful development tools
- Full stack for Web & API
Modules
Community
- http://beego.me/community
- Welcome to join us in Slack: https://beego.slack.com invite,
- QQ Group Group ID:523992905
- Contribution Guide.
License
beego source code is licensed under the Apache Licence, Version 2.0 (https://www.apache.org/licenses/LICENSE-2.0.html).