From 00cdfa483d10214a3cedcea635ab211677e85061 Mon Sep 17 00:00:00 2001
From: SquidSec Bot <bot@squidsec.local>
Date: Tue, 28 Jul 2026 16:08:24 -0400
Subject: [PATCH] sample(go): intentional vulnerabilities for SquidGate demo
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Demo only — hardcoded secret + injection / dangerous API patterns.
See examples/README.md
---
 examples/go/demo.go | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 examples/go/demo.go

diff --git a/examples/go/demo.go b/examples/go/demo.go
new file mode 100644
index 0000000..3865b2d
--- /dev/null
+++ b/examples/go/demo.go
@@ -0,0 +1,20 @@
+// SquidGate sample — Go (intentional vulnerabilities for demo)
+package demo
+
+import (
+	"database/sql"
+	"os/exec"
+)
+
+const apiKey = "go-demo-secret-key-not-real"
+
+func FindUser(db *sql.DB, id string) error {
+	// SQL injection
+	_, err := db.Query("SELECT * FROM users WHERE id = '" + id + "'")
+	return err
+}
+
+func Run(userInput string) error {
+	// command injection
+	return exec.Command("sh", "-c", "echo "+userInput).Run()
+}