CISSP: Certified Information Systems Security Professional

Injection vulnerabilities occur when untrusted input is accepted and interpreted as code or commands. Treating every input as untrusted and applying context-appropriate validation, sanitization, encoding, and parameterized interfaces mitigates this risk. OWASP identifies unvalidated, unfiltered, or unsanitized user-supplied data as a condition that makes applications vulnerable to injection.