# Ambient-Credential Trust

> Treating any request that carries ambient credentials, such as a session cookie, as legitimate without verifying its origin or intent.

Record: `lex:ambient-credential-trust`
Kind: anti-pattern
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lex-ambient-credential-trust

## category

- [Security Privacy Compliance](https://banes-lab.com/records/lex-category/security-privacy-compliance.md)

## referenced-by

- [CSRF Protection](https://banes-lab.com/records/arch/csrf-protection.md)