The ACL rule below is a default configuration in squid.conf templates (short and long) and so gets applied always with this module
http_access allow localnet
However, this is not always desirable. For instance, assuming you want to restrict outbound internet access of your private network to a few whitelisted sites. In this case the desired ACL in squid.conf should look like below to achieve the expected access restriction.
<...snip...>
# user-defined ACLs
acl sitesWhitelist dstdomain "/etc/squid3/sites.whitelist"
# user-defined http_accesses
http_access allow localnet sitesWhitelist
http_access allow localhost
http_access deny all
<...snip...>