CodeQL library for Go
codeql/go-all 2.1.3-dev (changelog, source)
Search

Module Concepts

Provides abstract classes representing generic concepts such as file system access or system command execution, for which individual framework libraries provide concrete subclasses.

Import path

import semmle.go.Concepts

Imports

FunctionInputsAndOutputs

Provides QL classes for indicating data flow through a function parameter, return value, or receiver.

GeneratedFile

Provides a class for generated files.

HTTP

Provides classes for working with HTTP-related concepts such as requests and responses.

go

Provides classes for working with Go programs.

Classes

EscapeFunction

A function that escapes meta-characters to prevent injection attacks.

FileSystemAccess

A data-flow node that performs a file system access, including reading and writing data, creating and deleting files and folders, checking and updating permissions, and so on.

HtmlEscapeFunction

A function that escapes a string so it can be safely included in an the body of an HTML element, for example, replacing {} in <p>{}</p>.

JsEscapeFunction

A function that escapes a string so it can be safely included in a JavaScript string literal.

LoggerCall

A call to a logging mechanism.

MarshalingFunction

A function that encodes data into a binary or textual format.

RegexpMatchFunction

A function that matches a regexp with a string or byte slice.

RegexpPattern

A node whose value is interpreted as a part of a regular expression.

RegexpReplaceFunction

A function that uses a regexp to replace parts of a string or byte slice.

SystemCommandExecution

A data-flow node that executes an operating system command, for instance by spawning a new process.

TemplateInstantiation

An instantiation of a template; that is, a call which fills out a template with data.

UnmarshalingFunction

A function that decodes data from a binary or textual format.

UrlEscapeFunction

A function that escapes a string so it can be safely included as part of a URL.

Modules

EscapeFunction

Provides a class for modeling new escape-function APIs.

FileSystemAccess

Provides a class for modeling new file-system access APIs.

LoggerCall

Provides a class for modeling new logging APIs.

MarshalingFunction

Provides a class for modeling new marshaling APIs.

RegexpMatchFunction

Provides a class for modeling new regular-expression matcher APIs.

RegexpPattern

Provides a class for modeling new regular-expression APIs.

RegexpReplaceFunction

Provides a class for modeling new regular-expression replacer APIs.

SystemCommandExecution

Provides a class for modeling new system-command execution APIs.

TemplateInstantiation

Provides a class for modeling new template-instantiation APIs.

UnmarshalingFunction

Provides a class for modeling new unmarshaling APIs.