Add test for Sqlx

Author: smowton

ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/go.mod

@@ -0,0 +1,7 @@
+module gormtest
+
+go 1.14
+
+require (
+	github.com/jmoiron/sqlx v1.2.0
+)

ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/sqlx.expected

@@ -0,0 +1,12 @@
+| sqlx.go:15:17:15:25 | untrusted |
+| sqlx.go:16:14:16:22 | untrusted |
+| sqlx.go:17:14:17:22 | untrusted |
+| sqlx.go:18:12:18:20 | untrusted |
+| sqlx.go:19:15:19:23 | untrusted |
+| sqlx.go:20:16:20:24 | untrusted |
+| sqlx.go:23:17:23:25 | untrusted |
+| sqlx.go:24:14:24:22 | untrusted |
+| sqlx.go:25:14:25:22 | untrusted |
+| sqlx.go:26:12:26:20 | untrusted |
+| sqlx.go:27:15:27:23 | untrusted |
+| sqlx.go:28:16:28:24 | untrusted |

ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/sqlx.go

@@ -0,0 +1,30 @@
+package sqlxtest
+
+import (
+	"github.com/jmoiron/sqlx"
+)
+
+func getUntrustedString() string {
+	return "trouble"
+}
+
+func main() {
+
+	db := sqlx.DB{}
+	untrusted := getUntrustedString()
+	db.Select(nil, untrusted)
+	db.Get(nil, untrusted)
+	db.MustExec(untrusted)
+	db.Queryx(untrusted)
+	db.NamedExec(untrusted, nil)
+	db.NamedQuery(untrusted, nil)
+
+	tx := sqlx.Tx{}
+	tx.Select(nil, untrusted)
+	tx.Get(nil, untrusted)
+	tx.MustExec(untrusted)
+	tx.Queryx(untrusted)
+	tx.NamedExec(untrusted, nil)
+	tx.NamedQuery(untrusted, nil)
+
+}

ql/test/library-tests/semmle/go/frameworks/SQL/Sqlx/sqlx.ql

@@ -0,0 +1,4 @@
+import go
+
+from SQL::QueryString qs
+select qs