virtual-agent/android

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow hosts Zoom in an Android WebView and registers @JavascriptInterface handlers for events like support_handoff/commonHandler, which means outsider-authored free text can arrive via the loaded page’s JavaScript payloads and be ingested through the native bridge at runtime.