If you discover a security vulnerability within this extension, please report via GitHub Security Advisories.

Please do not report security vulnerabilities through public GitHub issues.

We will acknowledge your email within 48 hours and provide a more detailed response within 7 days indicating the next steps in handling your report.

After the initial reply to your report, we will endeavor to keep you informed of the progress towards a fix and full announcement, and may ask for additional information or guidance.

1. Security issues are handled with high priority
2. A fix will be developed and tested
3. A new release will be published
4. The vulnerability will be disclosed after users have had reasonable time to update