Avoid request-driven array indexing without bounds checks
Arrays indexed with request-derived keys can read or write out-of-bounds entries.
#Metadata
#Why it matters
Attacker-controlled indexes bypass assumptions about array length and element initialization.
#Remediation
Parse and bound-check indexes, prefer maps keyed by stable identifiers, or avoid indexing arrays with request data.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.request-driven-array-index-access.rule.yaml.