Untrusted input

Also written: untrusted

Text that may be wrong or steered by an attacker, like a form entry from a stranger. Customer emails and model output count as untrusted, so you validate them and never execute them.