astro-server

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is an Astro server request layer (endpoints/middleware/page server logic) that ingests outsider-authored free text only via the inbound HTTP request it handles (e.g., request.json() / request body and headers in endpoint handlers, and cookies in middleware), which an outsider can supply directly to the app.