Web Frameworks

Chi HTTP router (chi.Router and chi.Mux). Path parameters extracted via URLParam are taint sources. Chi is one of the most popular lightweight routers in the Go ecosystem.

Represents echo.Context in the Echo HTTP framework (v4). Provides typed accessors for all parts of the HTTP request. All input methods are taint sources.

Represents fiber.Ctx in the Fiber HTTP framework (v2), inspired by Express.js. Zero-allocation design. All input methods are taint sources.

Go third-party package — github.com/flosch/pongo2/v6. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Represents gin.Context, the primary request/response carrier in the Gin HTTP framework. All user-input accessors (Query, Param, PostForm, etc.) are taint sources. Output methods (JSON, String, Redirect) are sinks for XSS and open-redirect rules.

Go third-party package — github.com/go-playground/validator/v10. Auto-indexed from CDN. Method-level security roles have not been annotated; rule writers should inspect the source before use.

Gorilla mux HTTP router (mux.Router). Path variables extracted via mux.Vars(r) are taint sources. Gorilla mux is the canonical router for larger Go web applications.