Go语言Cookie常用设置
原创
一.HttpOnly
HttpOnly:控制Cookie的内容是否可以被JavaScript访问到。通过设置HttpOnly为true时防止XSS攻击防御手段之一
默认HttpOnly为false,表示客户端可以通过js获取
在项目中导入jquery.cookie.js库,使用jquery获取客户端Cookie内容
HTML代码如下
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Title</title>
<script src="/static/js/jquery-1.7.2.js"></script>
<script src="/static/js/jquery.cookie.js"></script>
<script type="text/javascript">
$(function () {
$("button").click(function () {
var value = $.cookie("mykey")
alert(value)
})
})
</script>
</head>
<body>
<a href="setCookie">产生Cookie</a>
<button>获取cookie</button>
</body>
</html>服务端代码如下
package main
import (
"net/http"
"html/template"
)
func welcome(w http.ResponseWriter, r *http.Request) {
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
func setCookie(w http.ResponseWriter, r *http.Request) {
c := http.Cookie{Name: "mykey", Value: "myvalue", HttpOnly: false}
http.SetCookie(w, &c)
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
func main() {
server := http.Server{Addr: ":8090"}
http.Handle("/static/", http.StripPrefix("/static/", http.FileServer(http.Dir("static"))))
http.HandleFunc("/", welcome)
http.HandleFunc("/setCookie", setCookie)
server.ListenAndServe()
}二. Path
Path属性设置Cookie的访问范围
默认为”/”表示当前项目下所有都可以访问
Path设置路径及子路径内容都可以访问
首先先访问index.html,点击超链接产生cookie,在浏览器地址栏输入localhost:8090/abc/mypath后发现可以访问cookie
html代码没有变化,只需要修改服务器端代码如下
package main
import (
"net/http"
"html/template"
"fmt"
)
func welcome(w http.ResponseWriter, r *http.Request) {
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
func setCookie(w http.ResponseWriter, r *http.Request) {
//验证httponly
//c := http.Cookie{Name: "mykey", Value: "myvalue", HttpOnly: false}
//验证path
c := http.Cookie{Name: "mykey", Value: "myvalue", Path: "/abc/"}
http.SetCookie(w, &c)
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
//验证path属性是否生效的handle
func mypath(w http.ResponseWriter, r *http.Request) {
fmt.Fprintln(w, r.Cookies())
}
func main() {
server := http.Server{Addr: ":8090"}
http.Handle("/static/", http.StripPrefix("/static/", http.FileServer(http.Dir("static"))))
http.HandleFunc("/", welcome)
http.HandleFunc("/setCookie", setCookie)
//路径必须以/abc/开头
http.HandleFunc("/abc/mypath", mypath)
server.ListenAndServe()
}
三.Expires
Cookie默认存活时间是浏览器不关闭,当浏览器关闭后,Cookie失效
可以通过Expires设置具体什么时候过期,Cookie失效. 也可以通过MaxAge设置Cookie多长时间后实现
IE6,7,8和很多浏览器不支持MaxAge,建议使用Expires
Expires是time.Time类型,所以设置时需要明确设置过期时间
修改服务器端代码如下.只需要修改创建Cookie的代码,其他位置不变
package main
import (
"net/http"
"html/template"
"fmt"
"time"
)
func welcome(w http.ResponseWriter, r *http.Request) {
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
func setCookie(w http.ResponseWriter, r *http.Request) {
//验证httponly
//c := http.Cookie{Name: "mykey", Value: "myvalue", HttpOnly: false}
//验证path
//c := http.Cookie{Name: "mykey", Value: "myvalue", Path: "/abc/"}
//验证Expires
c := http.Cookie{Name:"mykey",Value:"myvalue",Expires:time.Date(2018,1,1,1,1,1,0,time.Local)}
http.SetCookie(w, &c)
t, _ := template.ParseFiles("view/index.html")
t.Execute(w, nil)
}
//验证path属性是否生效的handle
func mypath(w http.ResponseWriter, r *http.Request) {
fmt.Fprintln(w, r.Cookies())
}
func main() {
server := http.Server{Addr: ":8090"}
http.Handle("/static/", http.StripPrefix("/static/", http.FileServer(http.Dir("static"))))
http.HandleFunc("/", welcome)
http.HandleFunc("/setCookie", setCookie)
//路径必须以/abc/开头
http.HandleFunc("/abc/mypath", mypath)
server.ListenAndServe()
}原创声明：本文系作者授权腾讯云开发者社区发表，未经许可，不得转载。
如有侵权，请联系 cloudcommunity@tencent.com 删除。
原创声明：本文系作者授权腾讯云开发者社区发表，未经许可，不得转载。
如有侵权，请联系 cloudcommunity@tencent.com 删除。
评论
登录后参与评论
推荐阅读
腾讯云开发者
