Package secureheader adds some HTTP header fields widely considered to improve safety of HTTP requests. These fields are documented as follows: The easiest way to use this package: DefaultConfig is initialized with conservative (safer and more restrictive) behavior. If you want to change that, set its fields to different values before calling ListenAndServe. See the example code below. This package was inspired by Twitter's secureheaders Ruby library. See https://github.com/twitter/secureheaders.