OMAR
Treat Model Output Like User Input
← All Notes
AI Security24 February 2026 · 5 min read

Treat Model Output Like User Input

Rendering generated text as HTML is XSS where the payload is written by a stranger through your own feature.

AI SecurityAppSecllm-guard

Need this built properly?

I build secure, fast, bilingual platforms for clients across Egypt, Saudi Arabia, the UAE and Kuwait.

Keep Reading