Represents echo.Context in the Echo HTTP framework (v4). Provides typed accessors for all parts of the HTTP request. All input methods are taint sources.
.QueryParam().FormValue().Param().Bind().Redirect().QueryParam()SourceQueryParam(name string) string
Returns URL query parameter value by name.
return.FormValue()SourceFormValue(name string) string
Returns POST form value. Reads application/x-www-form-urlencoded or multipart/form-data.
return.Bind()SourceBind(i any) error
Deserializes request body into i based on Content-Type. i becomes tainted.
0.Redirect()SinkRedirect(code int, url string) error
Redirects to url. Sink for open-redirect.
1| FQN | Field | |
|---|---|---|
| github.com/labstack/echo/v4.Context | fqns[0] | |
| *.Context | patterns |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
require github.com/labstack/echo/v4 v4.11.4
from codepathfinder.go_rule import GoEchoContext