quoter-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Express/Next.js/FastAPI webhook handlers, the required runtime workflow ingests outsider-authored free text from incoming HTTP form fields (data, plus hash/timestamp) at POST /webhooks/quoter, and then parses data with JSON.parse after verifying only the Quoter MD5 signature (or returning 400 on failure).