Add GoChi Test Cases

Yunus AYDIN · Yunus AYDIN · commit ba4f8612eb8e · 2023-12-09T23:33:18.000+03:00
diff --git a/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.expected b/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.expected
@@ -0,0 +1 @@
+| WebCacheDeceptionGoChi.go:13:8:13:11 | "/*" | WebCacheDeceptionGoChi.go:6:2:6:27 | import specifier | Wildcard Endpoint used with "/*" in file: WebCacheDeceptionGoChi.go |
diff --git a/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.go b/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.go
@@ -0,0 +1,17 @@
+package bad
+
+import (
+	"net/http"
+
+	"github.com/go-chi/chi/v5"
+	"github.com/go-chi/chi/v5/middleware"
+)
+
+func badRoutingChi() {
+	r := chi.NewRouter()
+	r.Use(middleware.Logger)
+	r.Get("/*", func(w http.ResponseWriter, r *http.Request) {
+		w.Write([]byte("welcome"))
+	})
+	http.ListenAndServe(":3000", r)
+}
diff --git a/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.qlref b/go/ql/test/experimental/CWE-525/WebCacheDeceptionGoChi.qlref
@@ -0,0 +1 @@
+experimental/CWE-525/WebCacheDeceptionGoChi.ql

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+\| WebCacheDeceptionGoChi.go:13:8:13:11 \| "/" \| WebCacheDeceptionGoChi.go:6:2:6:27 \| import specifier \| Wildcard Endpoint used with "/" in file: WebCacheDeceptionGoChi.go \|`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+experimental/CWE-525/WebCacheDeceptionGoChi.ql`