Report security issues to security@bsns.cc.

Useful reports include SSRF bypasses, DNS rebinding issues, redirect validation bypasses, XSS through DNS records or HTTP headers, dependency vulnerabilities with practical exploit paths, and parser bugs that cause crashes or misleading findings.

The project is pre-1.0. Security fixes target the default branch until versioned releases are published.

We aim to acknowledge reports promptly, reproduce the issue, scope impact, and publish a fix before disclosing technical details publicly.