search

komuw / ong

ong, is a Go http toolkit.
MIT License
16 stars 4 forks source link

pprof server should also be available over https with redirection #366

Closed komuw closed 10 months ago

komuw commented 10 months ago

Currently even when using localhost, HSTS is enabled; https://github.com/komuw/ong/blob/d6e111ba7dd891cb122a6d7b2971504bab4165a7/middleware/security.go#L102-L109
Which means that request to the pprof server are forced to be https; and yet we do not serve pprof in https.

komuw commented 10 months ago

https://github.com/golang/go/issues/62358 (proposal: net/http/pprof: respect timeouts set using http.ResponseController)