If you discover a security vulnerability, we'd appreciate a non-public disclosure. Developer can be contacted privately on the [email protected].