Add a Server type about go-safeweb HOT 2 CLOSED

Another article that provides useful information on timeouts is this one

Things to keep in mind:

• we need to set either ReadTimeout (header + body) or ReadHeaderTimeout to prevent server resource exhaustation and DoS attacks
• the Server's Handler field should never be nil, but set to an instantiated ServeMux as otherwise handlers will be registered on the http.DefaultServeMux which is a global that all imported packages (and imports of imports) have access to and this can lead to information leakages
• we need to disallow the usage of http.ListenAndServe or http.Serve and could create equivalents with sane defaults

from go-safeweb.

After discussing this with @empijei: we should aim at providing a default safe Server type for now without much configuration options for v0.1.

from go-safeweb.