Use this repository only for authorized research against assets you are allowed to test. Do not use it to access, store, or disclose third-party data.

Reports about vulnerabilities in this project should include:

• affected version or commit
• affected component
• minimal reproduction steps that do not target third-party services
• impact and suggested fix, if known

Do not file Google or Alphabet VRP findings in this repository. Submit those through the official VRP channel after following the program rules.