db-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path $db is consumed inside function-tier code and flow-type datasource getListFlow/getByKeysFlow/getFlow, where user grid filter/sort inputs are injected via $flow.inParams.$filter/$orderby into dynamic filter values that are then compiled into $db predicates.