Represents *http.Request from the net/http standard library. Used in standard http.HandlerFunc handlers. FormValue, URL.Query(), Header.Get(), and Body are all taint sources.
.FormValue().PostFormValue().Header().URL().FormValue()SourceFormValue(key string) string
Returns the first value for the named POST or query-string field.
return.PostFormValue()SourcePostFormValue(key string) string
Returns the first value for the named POST body field only.
return.Header()SourceHeader.Get(key string) string
Returns the HTTP header value. User-controlled headers like X-Forwarded-For.
return.URL()SourceURL.Query().Get(key string) string
URL query string accessor. Equivalent to FormValue for GET params.
return| FQN | Field | |
|---|---|---|
| net/http.Request | fqns[0] | |
| *.Request | patterns |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
// standard library — no go.mod entry required
from codepathfinder.go_rule import GoHTTPRequest