Reporting a vulnerability

If you discover a security vulnerability, please email us confidentially so we can fix it. Please do not discuss it publicly. Also, please don't use it to destroy the site.