Lexicon

Raw Output Rendering

Kind: anti-pattern

Layer: Security Core

Record: lexicon:raw-output-rendering

Canonical: Lexicon

Emitting untrusted data into output without encoding it for its context, enabling injection attacks such as cross-site scripting.

Listed in Lexicon terms, after Point-in-Time Audit Only and before Security as Afterthought.

Category

  • Security Privacy Compliance

Negated by

  • Output Encoding

Violates

  • Output Encoding

Linked from

  • Security / Privacy / Compliance / Governance