Add getSourceType declarations to existing remote flow sources

Author: egregius313

go/ql/lib/semmle/go/frameworks/AwsLambda.qll

@@ -14,6 +14,8 @@ private class LambdaInput extends RemoteFlowSource::Range {
       not p instanceof ReceiverVariable
     )
   }
+
+  override string getSourceType() { result = "AWS Lambda Input" }
 }
 
 private class HandlerFunction extends FuncDef {

go/ql/lib/semmle/go/frameworks/Beego.qll

@@ -71,6 +71,8 @@ module Beego {
     }
 
     predicate isSafeUrlSource() { methodName in ["URI", "URL"] }
+
+    override string getSourceType() { result = "Beego Input" }
   }
 
   /** `BeegoInput` sources that are safe to use for redirection. */
@@ -100,6 +102,8 @@ module Beego {
         )
       )
     }
+
+    override string getSourceType() { result = "a Beego Controller" }
   }
 
   /**
@@ -111,6 +115,8 @@ module Beego {
         frn.getField().hasQualifiedName(contextPackagePath(), "BeegoInput", "RequestBody")
       )
     }
+
+    override string getSourceType() { result = "Beego Input Request Body" }
   }
 
   /**
@@ -122,6 +128,8 @@ module Beego {
         this = m.getACall().getResult()
       )
     }
+
+    override string getSourceType() { result = "a Beego cookie" }
   }
 
   private class BeegoOutputInstance extends Http::ResponseWriter::Range {

go/ql/lib/semmle/go/frameworks/Chi.qll

@@ -15,6 +15,8 @@ private module Chi {
     UserControlledFunction() {
       this.getTarget().hasQualifiedName(packagePath(), ["URLParam", "URLParamFromCtx"])
     }
+
+    override string getSourceType() { result = "URL parameter" }
   }
 
   /**
@@ -26,5 +28,7 @@ private module Chi {
     UserControlledRequestMethod() {
       this.getTarget().hasQualifiedName(packagePath(), "Context", "URLParam")
     }
+
+    override string getSourceType() { result = "URL parameter" }
   }
 }

go/ql/lib/semmle/go/frameworks/Echo.qll

@@ -24,6 +24,8 @@ private module Echo {
         this = call.getResult(0)
       )
     }
+
+    override string getSourceType() { result = "HTTP request context" }
   }
 
   /**
@@ -50,6 +52,8 @@ private module Echo {
         this = FunctionOutput::parameter(0).getExitNode(call)
       )
     }
+
+    override string getSourceType() { result = "HTTP request data" }
   }
 
   /**

go/ql/lib/semmle/go/frameworks/ElazarlGoproxy.qll

@@ -106,6 +106,8 @@ module ElazarlGoproxy {
         call.getTarget().hasQualifiedName(packagePath(), "ProxyCtx", "Charset")
       )
     }
+
+    override string getSourceType() { result = "HTTP request data" }
   }
 
   private class ProxyLogFunction extends StringOps::Formatting::Range, Method {

go/ql/lib/semmle/go/frameworks/Fasthttp.qll

@@ -271,6 +271,8 @@ module Fasthttp {
           this = m.getACall().getResult(0)
         )
       }
+
+      override string getSourceType() { result = "a component of a URI" }
     }
   }
 
@@ -296,6 +298,8 @@ module Fasthttp {
           this = m.getACall().getResult(0)
         )
       }
+
+      override string getSourceType() { result = "URL Parameters" }
     }
   }
 
@@ -421,6 +425,8 @@ module Fasthttp {
           this = m.getACall().getArgument(0)
         )
       }
+
+      override string getSourceType() { result = "HTTP request" }
     }
 
     /**
@@ -499,6 +505,8 @@ module Fasthttp {
           this = m.getACall().getResult(0)
         )
       }
+
+      override string getSourceType() { result = "HTTP header" }
     }
   }
 
@@ -529,6 +537,8 @@ module Fasthttp {
           this = m.getACall().getResult(0)
         )
       }
+
+      override string getSourceType() { result = "HTTP request header" }
     }
   }
 }

go/ql/lib/semmle/go/frameworks/Gin.qll

@@ -34,6 +34,8 @@ private module Gin {
         this = fld.getARead()
       )
     }
+
+    override string getSourceType() { result = "HTTP request context" }
   }
 
   /**
@@ -53,6 +55,8 @@ private module Gin {
         this = FunctionOutput::parameter(0).getExitNode(call)
       )
     }
+
+    override string getSourceType() { result = "HTTP request data" }
   }
 
   /**

go/ql/lib/semmle/go/frameworks/GoKit.qll

@@ -37,6 +37,8 @@ module GoKit {
 
     private class EndpointRequest extends RemoteFlowSource::Range {
       EndpointRequest() { this = DataFlow::parameterNode(getAnEndpointFunction().getParameter(1)) }
+
+      override string getSourceType() { result = "Go Kit endpoint request" }
     }
   }
 }

go/ql/lib/semmle/go/frameworks/GoMicro.qll

@@ -150,5 +150,7 @@ module GoMicro {
         this.getType().(PointerType).getBaseType() instanceof ProtocMessageType
       )
     }
+
+    override string getSourceType() { result = "service handler request" }
   }
 }

go/ql/lib/semmle/go/frameworks/GoRestfulHttp.qll

@@ -29,6 +29,8 @@ private module GoRestfulHttp {
    */
   private class GoRestfulSource extends RemoteFlowSource::Range {
     GoRestfulSource() { this = any(GoRestfulSourceMethod g).getACall() }
+
+    override string getSourceType() { result = "HTTP request" }
   }
 
   /**
@@ -42,5 +44,7 @@ private module GoRestfulHttp {
         this = FunctionOutput::parameter(0).getExitNode(call)
       )
     }
+
+    override string getSourceType() { result = "HTTP request body" }
   }
 }