tally-webhooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is a webhook HTTP handler that reads outsider-authored free-form text from the incoming request body (respondent submissions) via req.body / request.text() / request.body() and parses it into payload, which is then used to log/process fields.