Output Encoding

Definitions

1. The practice of escaping or encoding data before rendering it in a specific output context such as HTML, JavaScript, CSS, or URLs so untrusted input is not interpreted as executable content. Correct output encoding is a core defense against cross-site scripting and injection-through-rendering flaws.

   In plain English: Encoding untrusted data so it is displayed safely instead of being executed.

   Example: "The template bug was fixed by adding context-aware output encoding instead of trying to blacklist dangerous characters by hand."

Related Terms

• WAF
• SSRF
• HTTPS
• CAPTCHA
• HTTP Strict Transport Security
• Implicit Grant
• Padding Oracle Attack
• WAF Rule