code: func NewTemplateCheck(id string, conf gosec.Config) (gosec.Rule, []ast.Node) {
  
  	calls := gosec.NewCallList()
  	calls.Add("html/template", "HTML")
  	calls.Add("html/template", "HTMLAttr")
  	calls.Add("html/template", "JS")
  	calls.Add("html/template", "URL")
  	return &templateCheck{
  		calls: calls,
  		MetaData: gosec.MetaData{
  			ID:         id,
  			Severity:   gosec.Medium,
  			Confidence: gosec.Low,
  			What:       "this method will not auto-escape HTML. Verify data is well formed.",
  		},
  	}, []ast.Node{(*ast.CallExpr)(nil)}
  }
docs: // NewTemplateCheck constructs the template check rule. This rule is used to
  // find use of templates where HTML/JS escaping is not being used