remote-services

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime handler onReadBusinessPartners(req) delegates the incoming client-provided OData query object (req.query) to the remote service via this.S4.run(req.query), so outsider-authored free text can be ingested through the forwarded query without selecting a specific item first.