nextjs-locale-monorepo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is Next.js middleware and it directly consumes outsider-authored HTTP request free text via request.headers.get('Accept-Language') (and cookie value) to negotiate the locale, which is then used for redirects and cookie/Vary stamping.