Skip to content

Security: Jamalofski/praticulus

Security

SECURITY.md

Security Policy

Reporting a vulnerability

If you find a security issue in Praticulus, please report it privately by email to contact@praticulus.com. Do not open a public issue for security problems.

Please include:

  • the affected tool or page;
  • a description of the issue and its impact;
  • steps to reproduce, if possible.

Scope

Praticulus is a set of static, client-side tools. The most relevant issues are those that could leak a user's input, inject untrusted content, or break the promise that data never leaves the browser. Reports about third-party libraries are welcome when they affect a tool here.

What to expect

This is a small project, so there is no bug bounty, but every valid report is acknowledged and credited if you wish. We aim to respond within a few days and to fix confirmed issues as quickly as the severity warrants.

There aren't any published security advisories