Security

Security

This package uses password hashing, CSRF tokens on write forms, session regeneration on login, rate limiting, restricted server-side storage, protected data paths and baseline response headers. Production hosting should also enable TLS, backups, malware scanning, update management, rate limiting and monitoring.

Report a vulnerability

Send security reports to [email protected]. Do not access or alter data that is not yours while testing.