azure-event-grid-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Express webhook implementation, the required runtime workflow ingests outsider-authored free text from incoming HTTP requests by JSON-parsing req.body (Event Grid schema array or CloudEvents object) before/while authenticating, in POST /webhooks/azure-event-grid and also reads WebHook-Request-Origin from OPTIONS /webhooks/azure-event-grid.