# Gin Missing Input Validation

- ID: go-gin-missing-validation
- Severity: MEDIUM
- CWE: Improper Input Validation (CWE-20)
- Languages: Go
- Frameworks: gin

## Description

Gin endpoints accepting user input without struct binding validation.

## Detection Message

Gin application missing input validation middleware

## Remediation

Use ShouldBindJSON with struct binding tags for validation.

```go
type Input struct {
    Name  string `json:"name" binding:"required,min=2"`
    Email string `json:"email" binding:"required,email"`
}

func handler(c *gin.Context) {
    var input Input
    if err := c.ShouldBindJSON(&input); err != nil {
        c.JSON(400, gin.H{"error": err.Error()})
        return
    }
}
```

Learn more: https://shoulder.dev/learn/go/cwe-20/input-validation

## Related Rules

- **FastAPI Missing Request Validation** [MEDIUM]: 
- **Business Logic Input Validation** [MEDIUM]: 
- **Echo Missing Input Validation** [MEDIUM]: 
- **Fiber Missing Input Validation** [MEDIUM]: 
- **Business Logic Input Validation** [MEDIUM]: