Mercurius needs to support CSRF and XSS attack preventions

[bruferrari]

• CSRF is already supported by macaron, so it's just configuration.
• XSS doesn't come out-of-the-box on macaron, maybe a good library could do this work for us.

[felipeweb]

@bruferrari we can use this for xss https://github.com/unrolled/secure and this csrf https://github.com/go-macaron/csrf

[bruferrari]

Looks good for me @felipeweb, if you want to work on it... I'm already working on macaron CSRF implementation 😄

[felipeweb]

nice, maybe i will work on xss tomorrow night @bruferrari

[jeffprestes]

Any news on this guys?

[jeffprestes]

Any news?

[jeffprestes]

Just use Macaron Plug In: https://github.com/go-macaron/csrf