headless-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Oxylabs Headless Browser’s required runtime workflow uses a remote CDP-connected browser (via wss://USERNAME:PASSWORD@ubc.oxylabs.io / ubs.oxylabs.io) that can navigate to and ingest arbitrary page content (e.g., page.goto(...) then page.content()/text extraction), so outsider-authored text can be loaded and read depending on the target URL chosen.