RexOne Web is committed to robust frontend security, XSS defenses, safe token handling, and zero-leak client architecture.
| Version / Branch | Supported | Security Maintenance Status |
|---|---|---|
main / HEAD |
✅ | Active Security Updates |
dev |
✅ | Pre-release / Nightly Scans |
| Legacy releases | ❌ | Deprecated / Upgrade to main |
Please DO NOT report security vulnerabilities via public GitHub issues, discussions, or social media.
To report a frontend vulnerability, cross-site scripting (XSS) risk, or credential leak:
- Email:
rex9.tech@gmail.com - GitHub Security: Use GitHub Private Vulnerability Reporting under repository Security tab.
We acknowledge all reports within 48 hours and target patches within 7 days for critical issues.