facebook-marketplace-message-sender

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Facebook Marketplace message sending runs at runtime by navigating to attacker-provided thread_url/listing_url and reading page DOM text (including any outsider-authored chat/inbox content) via new_tab(THREAD_URL) and subsequent js(...) scans like document.body.innerText / textContent during composer verification and post-send confirmation.