Chapter 10 · Part 2: Input and context attacks

Instruction Smuggling and Hidden Content

Display text is not parse text; HTML, CSS, and Unicode hide instructions.

Frameworks: MITRE ATLAS

Layers: input · tokenization

Public practitioner doctrine. Free doctrine. Open knowledge. Paid enforcement.