Untrusted input

Also written: untrusted text, untrusted content

Any text an outsider can write or change, even indirectly. This includes documents, tool results, web pages, memory and file metadata, not just the user's message.