Lexicon

Ambient-Credential Trust

Kind: anti-pattern

Layer: Security Core

Record: lexicon:ambient-credential-trust

Canonical: Lexicon

Treating any request that carries ambient credentials, such as a session cookie, as legitimate without verifying its origin or intent.

Listed in Lexicon terms, after Ad-Hoc Permission Checks and before Anonymous Sensitive Access.

Category

  • Security Privacy Compliance

Negated by

  • CSRF Protection

Violates

  • CSRF Protection

Linked from

  • Security / Privacy / Compliance / Governance