Report a security problem in SmartString privately. Don't open a public issue: until a fix is released, a public report shows everyone how to attack the sites that use the library.
- GitHub: Report a vulnerability on the Security tab
- Email: support@interactivetools.com
Include the template code and the value that show the problem. Only the latest release gets security fixes.