This project prioritises the security of the data:
- Data is NOT stored: Sensible data such as NIF/CIF, names, phones or adresses are not stored on disk. They are only used during the conversion.
- Data validation: Validations are done, in both frontend and backend, to asure that the input data is correct and consistent.
Please do not report security vulnerabilities through public GitHub issues.
If you have encountered a potential security vulnerability in this project, please report it to us at [email protected]. We will work with you to verify the vulnerability and patch it.
When reporting issues, please provide the following information:
- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
- Full paths of source file(s) related to the manifestation of the issue
- The location of the affected source code (tag/branch/commit or direct URL)
- Any special configuration required to reproduce the issue
- Step-by-step instructions to reproduce the issue
- Proof-of-concept or exploit code (if possible)
- Impact of the issue, including how an attacker might exploit the issue
We request that you contact us via the email address above and give the project contributors a chance to resolve the vulnerability and issue a new release prior to any public exposure; this helps protect the project's users, and provides them with a chance to upgrade and/or update in order to protect their applications.