webapp-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the required workflow uses Playwright to navigate to a user-supplied local URL (e.g., http://localhost:5173 or file://...) and then reads rendered DOM/content via page.content()/screenshot/locator inspection, which can include outsider-authored text served by that page.