| Version | Supported |
|---|---|
| 1.x | ✅ |
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public issue
- Email: ajentik@users.noreply.github.com
- Include a description of the vulnerability and steps to reproduce
We will acknowledge receipt within 48 hours and aim to release a fix within 7 days for critical issues.
doo-iconik is a client-side SVG icon library. The primary security considerations are:
- SVG path data injection (mitigated: all icon data is static and bundled at build time)
- XSS via innerHTML in Angular, Alpine, Vanilla, Laravel, and Rails adapters (mitigated: icon data is never user-supplied at runtime)