Security fixes are provided for the latest published release.

Do not open a public issue for a vulnerability that could expose user data, bypass browser security boundaries, or enable code execution.

Use GitHub's private vulnerability reporting for this repository. Include the affected version, browser, reproduction steps, impact, and any proposed mitigation. You should receive an initial response within seven days.

Please allow time for a fix and release before public disclosure.