# Ambient-Credential Trust

> Treating any request that carries ambient credentials, such as a session cookie, as legitimate without verifying its origin or intent.

Record: `lexicon:ambient-credential-trust`
Kind: anti-pattern
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-ambient-credential-trust

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Ad-Hoc Permission Checks](https://banes-lab.com/records/lexicon/ad-hoc-permission-checks.md) and before [Anonymous Sensitive Access](https://banes-lab.com/records/lexicon/anonymous-sensitive-access.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Negated by

- [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)