tanstack-start-server-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow (createStartHandler and the provided request utilities like getRequest, getRequestHeaders, and cookie/session helpers) ingests arbitrary outsider-authored HTTP request data directly during request handling, so the agent could receive free text from attackers via normal client-supplied request bodies/headers/cookies routed into server functions.