We value the contributions of the security community. If you have discovered a security vulnerability, please review the following rules before submitting your findings.
Disclosure Rules
Only test your own accounts. Do not access or modify other users' data.
Do not run automated scans that generate significant traffic.
Do not publicly disclose the vulnerability before it's resolved.
Do not exploit the vulnerability beyond what's necessary to demonstrate it.
Avoid actions that could negatively impact system performance or availability (e.g., DoS).
Provide a clear, step-by-step report with all necessary reproduction details.
Include screenshots, payloads, or PoC code if possible.
Act in good faith. We welcome responsible hackers who help us improve.