hwp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads outsider-authored free text at runtime when an external user supplies an HWP/HWPX file whose internal sections/hp:t elements are parsed and converted to Markdown (e.g., hwp-parser.worker.ts receives {type:'parse', data:fileBuffer} and extracts text from BodyText/Section0 or Contents/section*.xml).