Output encoding still matters around LLMs

Model output going into a web page, a query or a command needs escaping exactly like any other untrusted text.

Teams frequently skip it because the text came from their own system, when in fact it was shaped by whatever the model read. The oldest defences in application security apply unchanged here, and the novelty of the component is what causes them to be forgotten.