Please don't report security problems in a public issue, a pull request or the Discord.
Email jesse@devsanantonio.com with "Security" in the subject line, and include:
- which repo or page is affected,
- what you found and how to reproduce it,
- what someone could do with it, if you know.
We'll acknowledge it as soon as we can, keep you updated while it's fixed, and credit you when it is, unless you'd rather we didn't.