Web
Expose Pprof on a Go Server Without Exposing It to Everyone
Serve net/http/pprof from a separate loopback listener with a token, avoid the DefaultServeMux trap, and fix the WriteTimeout error on CPU profiles.
9 min read
Tag
hardening
2 articles
Web
Templ Mistakes With Escaping and Raw HTML in Components
Where templ escapes for you and where it does not: URLs, SafeURL, style strings, Raw, script data and event handlers, shown with real output and tests.
10 min read