auth0-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow is an HTTP webhook endpoint that parses the incoming request body as JSON (a JSON array of log records) and then logs/uses fields from that payload; those fields are outsider-authored free text because they originate from Auth0 tenant log events sent by an external party into the handler context (e.g., req.body / request.json()), which can contain arbitrary strings like description, user_name, and user_agent.