Security fixes should be applied to the latest version on the repository's default branch.

Please do not publish exploit details in a public issue. Use GitHub's private vulnerability reporting feature if it is enabled for this repository, or contact the repository owner through a private GitHub channel. Include steps to reproduce, impact, and any suggested mitigation.

Sanskode is a static, client-side learning app and has no application server or account system. The hosted static files are still publicly accessible when deployed to a public Pages URL. Do not store secrets in the repository or treat browser-local progress as encrypted data.