nosurf [1] is a pretty popular CSRF protection package for Go. You need to realize that Go's built in "web framework" is extremely minimal unlike Django. It's m

nosurf [1] is a pretty popular CSRF protection package for Go. You need to realize that Go's built in "web framework" is extremely minimal unlike Django. It's more comparable to something like Flask, which also doesn't have CSRF protection built-in. [1] https://github.com/justinas/nosurf https://github.com/justinas/nosurf