clean-minimal-beige-light-mode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for the Neuform sandboxed demo renders a source HTML blob (decoded from encodedHtml) into frame.srcdoc, which includes and executes attacker-influenced free text content embedded in the runtime HTML (e.g., .textContent/DOM text) without first selecting a specific trusted item.