Fiber handlers should validate sensitive request bodies
Sensitive Fiber parsers should pair structs with validator tags or explicit validation so roles and secrets cannot be silently omitted.
#Metadata
#Why it matters
Regex heuristics flag `BodyParser`/`JSON` usage when structs in the same file define sensitive fields without `validate` or `binding` style tags.
#Remediation
Add `validate` struct tags, use Fiber validator middleware, or centralize DTO validation before business logic.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/go/go.security.fiber-sensitive-binding-without-validation.rule.yaml.