Word-like cutsets of strings?

[ainar-g]

See golang/go#47822 and especially this comment. Code like:

s = strings.TrimLeft(s, "user=")

is probably wrong.

[dgryski]

Interesting, although I don't know if semgrep or ruleguard is powerful enough to solve it in the general case. We'd just have deny list of "odd looking patterns" to watch out for, but obviously we would be far from catching everything.