If you discover a security vulnerability in the BDO Ship Building Tracker, please report it responsibly.
Do not open a public issue for security vulnerabilities.
Instead, please create a new issue on GitLab with the title "Security: [Brief Description]" and mark it as confidential.
Report security issues here: https://gitlab.com/user4302_Projects/coding/react-js/bdo-shipwright/-/issues
Please include as much information as possible:
- Type of vulnerability (XSS, data exposure, etc.)
- Steps to reproduce the issue
- Potential impact
- Any suggested fixes (if known)
We will acknowledge receipt of security reports within 48 hours and provide a detailed response within 7 days.
Security updates are provided for the current version of the application.
This application:
- Stores data locally in the browser only
- Does not transmit personal data to external servers
- Uses HTTPS when deployed to production
- Validates all user inputs
- Does not require authentication or external API keys