Do not open a public issue for security vulnerabilities.

Instead, please use GitHub's private vulnerability reporting:

1. Go to the Security tab
2. Click "Report a vulnerability"
3. Fill in the details

You will receive a response within 48 hours. We will work with you to understand the issue and coordinate a fix before any public disclosure.

This policy applies to:

• @markitjs/core
• @markitjs/react
• @markitjs/angular
• The documentation site at saurabhiam.github.io/markit

We support safe harbor for security researchers who:

• Make a good faith effort to avoid privacy violations and data destruction
• Only interact with accounts they own or with explicit permission
• Do not exploit a vulnerability beyond what is necessary to confirm it