apigee-x-proxy-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests user-supplied HTTP request/response text via Apigee variables like request.content/response.content that can be logged in PostClientFlow and also used by policies (e.g., MessageLogging, JavaScript parsing), so outsider-authored free text can flow into the system without preselecting a specific item.