igrantio-issuer-backend

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path /webhook ingests outsider-authored webhook JSON body from OWS (public/external party), parses it into payload and stores payload.data as event.data, which is then serialized as free text in /webhook/sse/:exchangeId (res.write(\data: ${JSON.stringify(event)}\n\n`)`).