web-frameworks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The "Optimized Data Fetching" example (app/posts/[slug]/page.tsx) fetches post content from an external API (https://api.example.com/posts/${slug}) and directly renders post.content, which clearly ingests untrusted/user-generated third‑party content into the runtime.