Injection

An injection refers to flaws that come from data and control being sent on the same channel, allowing users to send malicious control signals that are unwittingly processed.

Defense

The most robust/general solution is to separate data and control.

Examples

• Prompt injection in LLMs
• SQL injectoin
• Phone injection
• Command injection
• Cross-site scripting