Golang CSRF save template field in struct

Question

I am trying to make a simple webserver an decided to use bone for my routes and Gorilla csrf for csrf. The problem I am having is that I cannot save the csrf.TemplateField(req) in a struct to use in a template.

Imports:

import (
    "database/sql"
    "net/http"
    "text/template"

    "github.com/go-zoo/bone"
    "github.com/gorilla/csrf"
)

Struc:

type Input struct {
    Title     string
    Name      string
    csrfField template.HTML // Error here: Undefined "text/template".HTML
}

Handler Code:

func RootHandler(rw http.ResponseWriter, req *http.Request) {
    temp, _ := template.ParseFiles("site/index.html")
    head := Input{Title: "test", csrf.TemplateTag: csrf.TemplateField(req)}
    temp.Execute(rw, head)
}

I have tried changing the template.HTML type to string and then I got an error with csrf.TemplateField(req):

unknown field 'csrf.TemplateTag' in struct literal of type Input

So can anybody help? Am I using the wrong type?

Change csrf.TemplateTag to csrfField. Make sure csrf.TemplateField(req) is type template.HTML — Edwinner
– Edwinner, Commented May 9, 2018 at 21:19
@Godfrey Thank you I changed csrf.Template Tag to CSRFField and in the struc I changed csrfField to CSRFField — Ian.V
– Ian.V, Commented May 9, 2018 at 21:23

score 3 · Accepted Answer · 2018-05-09 21:21:27Z

3

The HTML type is declared in "html/template" . Import "html/template" instead of "text/template".

The template engine ignores unexported fields. Export the field name by starting the name with an uppercase character.

import (
    "database/sql"
    "net/http"
    "html/template"

    "github.com/go-zoo/bone"
    "github.com/gorilla/csrf"
)
Struc:

type Input struct {
    Title     string
    Name      string
    CSRFField template.HTML 
}

edited May 9, 2018 at 21:21

answered May 9, 2018 at 21:16

user5728991

Sign up to request clarification or add additional context in comments.

Comments

kbar · Accepted Answer · 2018-11-12 13:25:40Z

2

From the second sentence of text/template documentation:

To generate HTML output, see package html/template, which has the same 
interface as this package but automatically secures HTML output against 
certain attacks.

text/template does not have an HTML method, thus you are receiving an undefined error.

Happy coding.

edited Nov 12, 2018 at 13:25

answered May 9, 2018 at 21:19

kbar

771 silver badge9 bronze badges

Collectives™ on Stack Overflow

Golang CSRF save template field in struct

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related