如果您发现了安全漏洞，请不要通过公共问题跟踪器报告，因为这可能导致漏洞被公开披露。

请通过以下方式之一向我们报告安全问题：

• 邮箱：hiyo-qly@foxmail.com
• 在 GitHub 上创建私密安全问题（如果平台支持）

请在报告中包含以下信息：

• 漏洞的详细描述
• 如何复现漏洞的步骤
• 漏洞的影响范围
• 任何其他有助于理解和修复漏洞的信息

我们承诺在收到安全报告后的 48 小时内确认收到，并在一周内提供修复计划或状态更新。

为了保护自己和用户，请遵循以下最佳实践：

• 定期更新依赖项
• 不要在代码中硬编码敏感信息
• 使用参数化查询防止 SQL 注入
• 验证和清理所有用户输入
• 使用适当的身份验证和授权机制

English version

If you discover a security vulnerability, please do not report it through the public issue tracker, as this may expose the vulnerability to the public.

Please report security vulnerabilities by one of the following methods:

• Email: hiyo-qly@foxmail.com
• Create a private security issue on GitHub (if supported)

Please include the following information in your report:

• A detailed description of the vulnerability
• Steps to reproduce the vulnerability
• The impact of the vulnerability
• Any other information that may help us understand and fix the vulnerability

We promise to confirm receipt of your security report within 48 hours and provide a fix plan or status update within a week.

To protect yourself and users, please follow these best practices:

• Regularly update dependencies
• Do not hardcode sensitive information in your code
• Use parameterized queries to prevent SQL injection
• Validate and sanitize all user input
• Use appropriate authentication and authorization mechanisms