If you discover a security issue, please do not open a public issue. Email roberdan@fightthestroke.org and we will coordinate a fix and disclosure.