Gorilla mux HTTP router (mux.Router). Path variables extracted via mux.Vars(r) are taint sources. Gorilla mux is the canonical router for larger Go web applications.
.Vars().Vars()SourceVars(r *http.Request) map[string]string
Returns the route variables for the current request. All map values are user-controlled.
return.CurrentRoute()NeutralCurrentRoute(r *http.Request) *Route
Returns the matched route for the request. Metadata accessor (neutral).
.HandleFunc()NeutralHandleFunc(path string, f func(http.ResponseWriter, *http.Request)) *Route
Registers a handler function for a path. Routing primitive (neutral).
.Handle()NeutralHandle(path string, handler http.Handler) *Route
Registers an http.Handler for a path. Routing primitive (neutral).
.PathPrefix()NeutralPathPrefix(tpl string) *Route
Registers a sub-router under a path prefix. Routing primitive (neutral).
| FQN | Field | |
|---|---|---|
| github.com/gorilla/mux.Router | fqns[0] | |
| *.Router | patterns |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
require github.com/gorilla/mux v1.8.1
from codepathfinder.go_rule import GoGorillaMuxRouter