Avoid relaying request-controlled data through outbound Ruby HTTP clients
Outbound HTTP helpers should not receive URLs or bodies directly from `params` or other tainted sources without validation.
#Metadata
#Why it matters
User-controlled egress enables SSRF, data exfiltration, and token theft when combined with open HTTP clients.
#Remediation
Allowlist hosts, strip secrets from outbound payloads, and route external calls through audited integration points.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/ruby/ruby.security.sensitive-data-egress.rule.yaml.