lotobo/label-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Release Label Tools 0.1.0

Browse Source
This commit is contained in:
zemion
2026-09-01 13:05:57 +02:00
commit 4e3df8d4a4
64 changed files with 10953 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/SECURITY.md
+14
View File
@@ -0,0 +1,14 @@
# Security
Report vulnerabilities privately through the repository owner on the Gitea
instance. Do not attach confidential merge data to a public issue.
Label Tools keeps data in browser memory and accepts only bounded CSV/JSON and
PNG/JPEG/WebP assets. Merge text and SVG attributes are escaped. Generated
barcode markup comes from a pinned local encoder and is checked for active or
linked elements. Remote image URLs, user-provided SVG and arbitrary templates
are not accepted in v0.1.
Generated labels can contain sensitive or guessable identifiers. Review the
preview and warnings before export, and do not treat serial/random values as an
access-control system without an independent security design.