# Fiber Missing Input Validation - ID: go-fiber-missing-validation - Severity: MEDIUM - CWE: Improper Input Validation (CWE-20) - Languages: Go - Frameworks: fiber ## Description Fiber endpoints accepting user input without struct validation. ## Remediation Use BodyParser with struct validation tags. ```go type Input struct { Name string `json:"name" validate:"required"` } func handler(c *fiber.Ctx) error { var input Input if err := c.BodyParser(&input); err != nil { return c.Status(400).JSON(fiber.Map{"error": err.Error()}) } if err := validate.Struct(&input); err != nil { return c.Status(400).JSON(fiber.Map{"error": err.Error()}) } return nil } ``` Learn more: https://shoulder.dev/learn/go/cwe-20/input-validation ## Related Rules - **FastAPI Missing Request Validation** [MEDIUM]: - **Business Logic Input Validation** [MEDIUM]: - **Echo Missing Input Validation** [MEDIUM]: - **Gin Missing Input Validation** [MEDIUM]: - **Business Logic Input Validation** [MEDIUM]: