Security Reporting

1. How to report

Email zhaoyiyi31415@gmail.com with “Security Report” in the subject. Include the affected page, reproduction steps, impact and only the screenshots needed. Do not include real user data, credentials or secrets in email.

2. Research boundaries

• Do not access, alter, download or disclose data that is not yours.
• Do not perform denial-of-service, social engineering, spam, persistence or destructive testing.
• Stop further exploitation after finding an issue and allow reasonable remediation time before disclosure.
• No bug bounty is promised; any reward requires a separate written agreement.

3. Our response

We will acknowledge reports, assess impact and prioritise verified risks. Progress updates or public credit depend on the issue, investigation status and reporter preference.