revolut-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, the required workflow reads outsider-authored Revolut webhook free text from the incoming HTTP request body and headers (e.g., rawBody from request.text()/request.body()), then parses it/uses its contents in the handler—this payload is not chosen by the operating user, creating an indirect prompt-injection risk if later fed into an LLM.