If you discover a security vulnerability in this project, please report it responsibly.
Do not open a public GitHub issue for security vulnerabilities.
Instead, please use GitHub's private vulnerability reporting to submit your report. This ensures the issue can be assessed and addressed before public disclosure.
This project is a Cloudflare Worker that proxies WKD requests. Security concerns include:
- Request handling and input validation
- Upstream proxy behavior
- Information disclosure in logs or error responses
- DNS record management in the deploy workflow
We aim to acknowledge reports within 48 hours and provide a fix or mitigation plan within 7 days for confirmed vulnerabilities.