HighFile-scopePHP Plug & play

Validate API response structure

After decoding, assert required keys and types before use; reject unexpected shapes.

Why this matters

External APIs change. Structural checks prevent downstream errors and data corruption.

Side-by-side examples engineers can pattern-match during review.

Avoid

$status = $data['status']; $id = $data['id'];

Prefer

if (!isset($data['status'], $data['id']) || !is_string($data['status'])) {
    throw new UnexpectedValueException('Invalid response structure');
}

Bad

$v = $data['x'];

Good

if(!isset($data['x'])) throw new UnexpectedValueException()

From the same buckets as this rule.

Critical
Check consent and role-based authorization before returning ePHI
Handlers must verify the requester’s role and a valid consent/relationship (e.g., care team assignment) before disclosing ePHI; include Purpose-Of-Use in the decision and audit the outcome.
compliance-hipaasecurity-hardening+2
Critical
Children's data: verify age and parental consent
If data subject is a child/adolescent, require age verification and parental/legal guardian consent prior to processing; deny processing otherwise and do not store the payload.
compliance-lgpdapi-conventions+1
Critical
Disallow public ingress without explicit allowlist
For Ingress/Service of type LoadBalancer, require host/path allowlist and TLS; forbid 0.0.0.0/0 exposure without WAF or Auth.
infra-as-codesecurity-hardening+1