Home / Function/ isInsecureCookieExtractor() — fiber Function Reference

isInsecureCookieExtractor() — fiber Function Reference

Architecture documentation for the isInsecureCookieExtractor() function in config.go from the fiber codebase.

Entity Profile

Dependency Diagram

graph TD
  c241f428_bbad_e71e_e828_68979a9dedf1["isInsecureCookieExtractor()"]
  077ca922_400b_9f3f_bb69_e8f547a31678["config.go"]
  c241f428_bbad_e71e_e828_68979a9dedf1 -->|defined in| 077ca922_400b_9f3f_bb69_e8f547a31678
  26373eb7_4116_a5b7_61ab_e893dc010693["validateExtractorSecurity()"]
  26373eb7_4116_a5b7_61ab_e893dc010693 -->|calls| c241f428_bbad_e71e_e828_68979a9dedf1
  style c241f428_bbad_e71e_e828_68979a9dedf1 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

middleware/csrf/config.go lines 208–223

func isInsecureCookieExtractor(extractor extractors.Extractor, cookieName string) bool {
	if extractor.Source == extractors.SourceCookie {
		// Exact match - definitely insecure
		if extractor.Key == cookieName {
			return true
		}

		// Case-insensitive match - potentially confusing, warn but don't panic
		if utils.EqualFold(extractor.Key, cookieName) && extractor.Key != cookieName {
			log.Warnf("[CSRF WARNING] Extractor cookie name '%s' is similar to CSRF cookie '%s' - this may be confusing",
				extractor.Key, cookieName)
		}
	}

	return false
}

Subdomains

Frequently Asked Questions

What does isInsecureCookieExtractor() do?
isInsecureCookieExtractor() is a function in the fiber codebase, defined in middleware/csrf/config.go.
Where is isInsecureCookieExtractor() defined?
isInsecureCookieExtractor() is defined in middleware/csrf/config.go at line 208.
What calls isInsecureCookieExtractor()?
isInsecureCookieExtractor() is called by 1 function(s): validateExtractorSecurity.

Analyze Your Own Codebase

Get architecture documentation, dependency graphs, and domain analysis for your codebase in minutes.

Try Supermodel Free