Security Policy

Thanks for looking at the security of Lightning! If you've found issues with Lightning in a supported version, please email william (underscore) horning (at) outlook (dot) com.

Please DO NOT use Github to report security issues.

What to include in a report

• As much detail as possible
• Possible ways to reproduce the issue
• Code causing the issue (if known)
• Ways to cause the issue

Things to not do

• Publically disclose vulnerabilities before they are fixed
• Exploiting instances of Lightning you don't host
• Targeting physical infrastructure

Things we won't do

• Take legal action against you
• Reveal information about you without your consent