microsoft-graph-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Outsider free text is ingested from runtime HTTP requests to the webhook endpoint—specifically the validationToken query parameter and the JSON req.body.value[*] notification fields—which are not authored by the operating user and can contain arbitrary attacker-controlled strings that the code places directly into the response path (and could be logged/processed), e.g. validationToken from request.nextUrl.searchParams.get(...) / req.query.validationToken rather than any vetted local source.