html-ppt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In assets/runtime.js, presenter mode (S) builds the presenter window by embedding slide notes HTML (outsider-provided free text written into <aside class="notes">) into presenterWin.document.write(...), and runtime also copies/exports notesBody.innerHTML, making that free text directly ingested at render time.