If you believe you've found a security vulnerability in this repository or in the code that powers robearlam.com, please report it privately rather than opening a public issue.

The preferred way to report is via GitHub's private vulnerability reporting:

Open a private security advisory

This sends the report directly to me without exposing it publicly while it's being investigated.

Please include:

• A description of the issue and its potential impact
• Steps to reproduce, or a proof of concept where possible
• Any suggested mitigations, if you have them

I'll acknowledge the report as soon as I'm able, and keep you updated as I investigate. Thank you for taking the time to report responsibly.