Please do not open a public issue for a security problem. Use GitHub's private vulnerability reporting on this repository (Security tab, "Report a vulnerability"), which notifies the maintainer privately.

Include what the problem is, how to reproduce it, and the widget version from manifest.json. Expect an acknowledgement within a week.

The latest release is the supported version. Fixes go into a new release rather than a patch of an older tag.

This repository contains an ArcGIS Experience Builder widget. It runs entirely in the browser with the credentials and services the host application provides. Reports about the ArcGIS platform itself belong with Esri, not here.