# Raw Output Rendering

> Emitting untrusted data into output without encoding it for its context, enabling injection attacks such as cross-site scripting.

Record: `lexicon:raw-output-rendering`
Kind: anti-pattern
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-raw-output-rendering

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Point-in-Time Audit Only](https://banes-lab.com/records/lexicon/point-in-time-audit-only.md) and before [Security as Afterthought](https://banes-lab.com/records/lexicon/security-as-afterthought.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Negated by

- [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)