hudra/SECURITY.md

Hudra Security Policy

Please report suspected Hudra vulnerabilities privately by emailing support@napper.au with the subject Hudra security report.

Include:

• the Hudra version and browser version;
• the affected feature;
• clear reproduction steps; and
• the potential security or privacy impact.

Do not include passwords, authentication details, student records or private lesson content. Use a minimal synthetic example if content is needed to explain the issue.

Please do not disclose a suspected vulnerability publicly before the Hudra maintainers have had a reasonable opportunity to investigate and respond.