igrantio-frontend-client

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime workflow reads outsider-authored free text from the tenant backend over SSE: openSseSession() creates an EventSource to ${webhookBaseUrl}/sse/${exchangeId}, parses event.data as JSON, and passes it to options.onMessage (and then triggers a DELETE), meaning attacker-controlled webhook/message content is ingested at runtime.