Topic

Web application output encoding

Applicable to

all

History

Priority

must

Mar 2022

Output encoding is performed on all output produced by web applications.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

2017

Output encoding must be performed on all output produced by a web application.

Control Text Changed. No public explaination.

2015

Agencies must ensure that output encoding is performed on all output produced by a webapplication.