Please report security problems privately. Do not open a public issue.

Use GitHub security advisories on this repository:

1. Open the Security tab of the repository.
2. Choose "Report a vulnerability".
3. Describe the problem, the steps to reproduce it and the version you tested.

Please do not include real visitor data, real keys or details of a live site that is not yours.

Fixes are made on the latest 1.x release.

This policy covers the code in this repository. For how the kit handles misuse, and what it leaves to you, see docs/security.md. A report is most useful when it shows how to get past a protection that the page describes.