Go: Add Tainted Path sanitizers

[Kwstubbs]

Add gorilla mux.Vars sanitizer

[owen-mc]

Please add a test for net/url.URL.Path, and mention it in the change note. Also, why do you think that reading that field is a sanitizer? I don't see anything in the docs about what characters it may or may not contain.

[Kwstubbs]

@owen-mc It seems the default mux also sanitizes the path using this function. It seems there are also some changes implemented in version 1.22 from the comments here that I have yet to test (I'm on 1.21). I'll go ahead and remove the net/url.URL.Path sanitizer for now and possibly come back to it.

[owen-mc]

Looks good - just need to add two tests for SkipClean (called with true and false).

[owen-mc]

Looks good! Only very minor comments left.

[owen-mc]

I think if you're just committing my suggestions it doesn't dismiss my review.

[Kwstubbs]

committing suggestions didn't work 😞

[owen-mc]

committing suggestions didn't work 😞

Shows how much I know 😆 .

[Kwstubbs]

@owen-mc Just wanted to remind to merge since its been a couple months.

[owen-mc]

Oh no! Sorry about that, it slipped off my list. Thanks for prodding me. Also, I forget that other people can't press the merge button 😆 . The postprocess queries that you're using were moved around so I've fixed the references, which should make CI pass.