External input cannot be trusted: input validation and encoding strategies

This guidance explains why all external input should be treated as untrusted and outlines practical validation and encoding strategies — prefer allowlist validation, canonicalise inputs, apply context-specific output encoding, centralise schema-based checks, test negative and boundary cases, and place controls at trust boundaries — to reduce injection risks, parser abuse, and downstream data corruption.