fixtures

Documentation

Overview

Negative fixtures for the Go taint engine. Every call site below would match a conservative go/no-* rule's surface, but no go/taint-* rule may fire: the sinks either take literal arguments, a value that had its taint cleared by reassignment, or a value that lives in a sibling function (cross-function isolation).

Positive fixtures for the Go taint engine. Each handler flows an untrusted source into a taint sink. The taint rules must fire exactly once per handler; the conservative go/no-* counterparts coexist wherever their pattern also matches.