d2-04-search-delete-page

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In up-app/src/app/pages/-search/-search.component.ts, the runtime workflow calls Service.getAll() and renders the returned Entity fields (e.g., item.empName/address/phoneNo) in the page template, so outsider-authored record content can be ingested via the entity service without any prior item selection.