Matt Silverlock

No. You have said encryption. base64 does not encrypt anything at all and is not a "relatively simple method of encryption". Base64 (http://en.wikipedia.org/wiki/Base64) is just a way to encode data...

I'll likely move to v1 - given that this library hasn't seen a v1.0.0 itself yet - as a "breaking" change. On Sat, Jan 4, 2020 at 11:32 AM Dr...

Leverage https://github.com/docker/distribution/blob/master/reference/reference.go for image URL parsing

Interesting - the phrase was just `HELLOTHERE`. Using `GORILLA` still generates the error and a failure to connect -   I wonder if this is a local/corp proxy issue....

To necro this thread, and although I think the chances of a nonce collision for longer-term storage (as opposed to a high rate of individual datagrams) is being overstated, why...

If you don’t set Path, it is set to the _current_ path that the cookie was issued at. Cookies are then sent for that Path as long as the path...

I think you want to *keep* it, so that the cookie is valid across all paths. On Fri, Jan 11, 2019 at 11:43 AM frederikhors wrote: > @elithrar ok. So...

Show more of your Go code - do you have one instance of nosurf? More than one? On Fri, Jan 11, 2019 at 12:07 PM frederikhors wrote: > @elithrar I'm...

Are these AJAX requests? Where is X-CSRF-Token coming from? I don't see you setting a cookie with that name here at all. Is your AJAX middleware sending the right thing?

Multiple, identical tokens can be more easily identified in a compressed response due to the way compression works (i.e. go back N bytes for X length). I'm not sure there's...