Report vulnerabilities to joe-github@cursive.net.

Responses are usually withhin a day unless I'm travelling. No bounties are offered.
If I don't respond within a week, please get creative about another mechanism to responsibly disclose the issue if it's serious.