paymob-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime the Express/Next/FastAPI webhook handlers read outsider-authored request body JSON (body.obj / await request.json() / request.json()) and query params (hmac), which are then concatenated/used for verification logic—this is outsider free text entering the handler context (and could be forwarded into any LLM step if present).