Output Encoding / Formatting Flexibility

Kind: tension

Record: tension:formatting-flexibility-output-encoding

Canonical: Schema

"output-encoding" (security-core layer) is traded against "Formatting Flexibility" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Formatting Flexibility" and choosing an explicit operating point.

Listed in Tensions, after Input Validation / Input Flexibility and before Encryption at Rest / Key Operations.

In tension with

Mechanism

Linked from