Ver Fonte

Merge pull request #993 from easonlin404/docs

Add SecureJSON doc
Javier Provecho Fernandez há 8 anos atrás
pai
commit
e8187ddf14
1 ficheiros alterados com 23 adições e 0 exclusões
  1. 23 0
      README.md

+ 23 - 0
README.md

@@ -559,6 +559,29 @@ func main() {
 }
 ```
 
+#### SecureJSON
+
+Using SecureJSON to prevent json hijacking. Default prepends `"while(1),"` to response body if the given struct is array values.
+
+```go
+func main() {
+	r := gin.Default()
+
+	// You can also use your own secure json prefix
+	// r.SecureJsonPrefix(")]}',\n")
+
+	r.GET("/someJSON", func(c *gin.Context) {
+		names := []string{"lena", "austin", "foo"}
+
+		// Will output  :   while(1);["lena","austin","foo"]
+		c.SecureJSON(http.StatusOK, names)
+	})
+
+	// Listen and serve on 0.0.0.0:8080
+	r.Run(":8080")
+}
+```  
+
 ### Serving static files
 
 ```go