Open Graph is a metadata standard used to control how a web page appears when shared on social platforms and messaging apps. It lets a site define a title, description, image, and other preview fields so shared links render as a card instead of plain text. In practice, Open Graph data is often generated dynamically from page content or request input.
In cybersecurity, that dynamic behavior matters because preview generation can become a trust-boundary problem. If attacker-controlled text is inserted into Open Graph templates, the application may create malformed markup, trigger parser bugs, or expose server-side image generators to injection. Defenders should treat OG metadata handlers like any other untrusted-input path: validate values, escape output, and avoid reflecting raw request data into HTML, SVG, or related rendering pipelines.