cometchat-react-push

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, outsider-authored free text is ingested indirectly via the CometChat webhook payload (message-sent) where data.text from a chat message is used to build the push payload preview that the browser Service Worker reads and displays via event.data.json() → showNotification(...).