# Echo Missing Input Validation

- ID: go-echo-missing-validation
- Severity: MEDIUM
- CWE: Improper Input Validation (CWE-20)
- Languages: Go
- Frameworks: echo

## Description

Echo endpoints accepting user input without struct validation.

## Remediation

Use struct binding with validation tags.

```go
type Input struct {
    Name string `json:"name" validate:"required"`
}

func handler(c echo.Context) error {
    var input Input
    if err := c.Bind(&input); err != nil {
        return c.JSON(400, map[string]string{"error": err.Error()})
    }
    if err := c.Validate(&input); err != nil {
        return c.JSON(400, map[string]string{"error": err.Error()})
    }
    return nil
}
```

Learn more: https://shoulder.dev/learn/go/cwe-20/input-validation

## Related Rules

- **FastAPI Missing Request Validation** [MEDIUM]: 
- **Business Logic Input Validation** [MEDIUM]: 
- **Fiber Missing Input Validation** [MEDIUM]: 
- **Gin Missing Input Validation** [MEDIUM]: 
- **Business Logic Input Validation** [MEDIUM]: