tanstack-start

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow described by createFileRoute/server.handlers API routes (e.g., /api/posts and middleware/server functions), outsider-authored free text from HTTP request bodies (e.g., await request.json(), await request.text(), request.formData()) is ingested directly by the server-side handlers at runtime.