lildra/SECURITY.md

Security policy

Report suspected Lildra vulnerabilities privately to support@napper.au with the subject Lildra security report.

Please include:

• the Lildra version and browser;
• the affected page type;
• clear reproduction steps; and
• the potential security or privacy impact.

Do not include passwords, authentication details, student records, or private lesson content. Use a minimal test case or redacted information where possible.

Please do not disclose a suspected vulnerability publicly before there has been a reasonable opportunity to investigate and respond.