insecure-output-handling

What problem does it solve?

Protects applications from XSS, command injection, and second-order injections by treating LLM output as untrusted across UI rendering, code execution, and downstream integrations.

Core Features & Use Cases

• Safe rendering: Enforces DOM-safe sinks and escaping for all LLM-derived content.
• Input sanitization: Applies universal sanitation rules to LLM outputs before consumption.
• Usage scenarios: Applies to web apps, dashboards, and automation pipelines that render or execute LLM outputs.

Quick Start

Apply the insecure output guidelines to your UI rendering and downstream integrations to sanitize LLM responses and prevent unsafe execution.