Dev Workbench is designed so that nothing you paste leaves your browser. If you find a way that it does — or any other vulnerability such as XSS through crafted input or share links — please report it privately.

Use GitHub's private vulnerability reporting. Please do not open a public issue.

Include steps to reproduce, the affected tool, and your browser version. We aim to acknowledge reports within 72 hours and to ship a fix for confirmed issues within 14 days.

Only the latest release on the main branch, which is what the hosted demo serves, receives security fixes.