gsap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). demo/index.html embeds third-party source HTML (decode(encodedHtml)) into an iframe via frame.srcdoc, and that embedded document can contain attacker-influenced free text like the encodedHtml payload (which includes arbitrary event/message-handling and UI text), meaning the runtime LLM workflow is exposed to outsider-authored free text through the iframe’s document context.